Claude Code, Copilot and Codex all got hacked. Every attacker went for the credential, not the model.

Six teams exploited Claude Code, Copilot, Codex, and Vertex AI in nine months. Every attack hit runtime credentials that IAM ...
Windows Report

Visual Studio Code Update Adds Remote Copilot Control and Enterprise AI Restrictions

VS Code 1.118 adds remote Copilot control, enterprise AI restrictions, and smarter caching while improving developer ...
TechSpot

GitHub pulls Copilot "feature" after it added advertising to more than 11,000 pull requests

WTF?! Microsoft's GitHub is rolling back a controversial update after developers discovered that its AI assistant, Copilot, was quietly inserting promotional messages into user-generated pull requests ...
HotHardware

GitHub Reverses Course And Will Train AI On Your Copilot Data Unless You Opt Out

Starting on April 24th, all GitHub Copilot interaction data including inputs, outputs, code snippets, and associated context from Copilot Free, Pro, and Pro+ users will be used to train GitHub's AI ...
Windows Report

GitHub Copilot Will Learn From Your Prompts and Code Unless You Opt Out

Microsoft is updating GitHub Copilot’s data usage policies to allow the AI to learn directly from user interactions, marking a shift away from relying primarily on public repositories and internal ...
Bleeping Computer

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, repositories, and extensions on GitHub, npm, and VSCode/OpenVSX extensions. Evidence ...
blockchain

GitHub Copilot VS Code v1.110 Brings Agentic Browser Tools and Plugin System

GitHub's latest VS Code update introduces agent plugins, browser automation tools, and shared memory across Copilot products for complex coding workflows. GitHub shipped Visual Studio Code v1.110 on ...
Neowin

Microsoft's GitHub Copilot adds OpenAI's top language model hours after launch

GitHub Copilot has just added GPT-5.4 to its roster of large language models that it supports. The addition comes just hours after GPT-5.4 was published by OpenAI. OpenAI has just announced the latest ...
The Hacker News

RoguePilot Flaw in GitHub Codespaces Enabled Copilot to Leak GITHUB_TOKEN

A vulnerability in GitHub Codespaces could have been exploited by bad actors to seize control of repositories by injecting malicious Copilot instructions in a GitHub issue. The artificial intelligence ...
SecurityWeek

GitHub Issues Abused in Copilot Attack Leading to Repository Takeover

Attackers can inject malicious instructions in a GitHub Issue that are automatically processed by Copilot when launching a Codespace from that issue. A vulnerability in GitHub Codespaces could have ...
Visual Studio Magazine

Comparing Amazon Q and GitHub Copilot Agentic AI in VS Code

Amazon Q Developer outperformed GitHub Copilot Pro in some aspects, completing a complex editorial task in 5 minutes compared to Copilot's 15 minutes. While GitHub Copilot demonstrated superior ...