Massive VS Code Secrets Leak Puts Focus on Extensions, AI: Wiz

Researchers with cybersecurity firm Wiz earlier this year discovered, almost by chance, a significant supply chain risk and massive secrets leak in the Visual Studio Code and OpenVSX marketplaces that they said put a focus on the ongoing security issues presented by extensions and plugins. In their months-long investigation with Microsoft, the researchers found that […]

from DevOps.com https://ift.tt/ktGSdDF