Malicious Visual Studio Code extensions disguised as dark themes and AI assistants infect developers with infostealing malware, stealing cookies, WiFi passwords, and system data.

Microsoft is publishing a relatively light 54 new vulnerabilities this December 2025 Patch Tuesday, which is significantly lower than we have come to expect over the past couple of years.