integrated development environments (IDEs) Archives

GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs

13Apr

By RBNo Comments

News

GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs

Another iteration of the current GlassWorm campaign has been identified by cybersecurity researchers. It uses a new Zig dropper that is intended to covertly infect all integrated development environments (IDEs) on a developer's computer. The method was found in specstudio.code-wakatime-activity-tracker, an Open VSX extension that poses as WakaTime, a well-known utility that tracks how much time programmers spend in their IDE. It is no longer possible to download the extension. According to an investigation released this week by Aikido Security researcher Ilyas Makari, the plugin […] sends a Zig-compiled native binary with its JavaScript code. GlassWorm has previously used native built code in extensions. But instead of employing the malware directly as the payload, it serves as a...

Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks

Several AI-powered Integrated Development Environments (IDEs) that mix legitimate functionality with quick injection primitives to accomplish data exfiltration and remote code execution have been found to have more than 30 security flaws. Security researcher Ari Marzouk (MaccariTA) has dubbed the security flaws IDEsaster. Among the well-known IDEs and extensions they impact include Cursor, Windsurf, Kiro.dev, GitHub Copilot, Zed.dev, Roo Code, Junie, and Cline. Twenty-four of them have been given CVE IDs. Marzouk told The Hacker News, I think the most surprising finding of this research is that multiple universal attack chains affected every single AI IDE tested. The base software (IDE) is essentially ignored in the threat model of all AI IDEs (and coding assistants that interact...

New Flaw in IDEs Like Visual Studio Code Lets Malicious Extensions Bypass Verified Status

According to a recent study, there are flaws in the way that integrated development environments (IDEs) including Microsoft Visual Studio Code, Visual Studio, IntelliJ IDEA, and Cursor manage the extension verification process, which allows hackers to run malicious code on developer computers. In a report provided to The Hacker News, OX Security researchers Nir Zadok and Moshe Siman Tov Bustan stated, "We found that publishers can add functionality to extensions while maintaining the verified icon due to faulty verification checks in Visual Studio Code." Because of this, malicious extensions may seem validated and authorized, which could lead to a false sense of trust. The research specifically discovered that in order to ascertain if an extension is verified or not, Visual Studio C...