Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.
Microsoft links SolarWinds WHD exploits to RCE, lateral movement, and domain compromise in multi-stage attacks.
Google has announced the public preview of the Developer Knowledge API and MCP server, enabling AI assistants to access current developer documentation programmatically.