MEDIUMAi
Global

Microsoft Code Editor Flaw Lets Attackers Hijack Developer PCs

·Source: Bank Info Security

Updated:

Executive Summary

Hidden Install Settings Let Malicious MCP Links Execute Code Microsoft patched a high-severity flaw in Visual Studio Code after researchers found attackers could hide malicious settings inside MCP server install

Analysis

Hidden Install Settings Let Malicious MCP Links Execute Code Microsoft patched a high-severity flaw in Visual Studio Code after researchers found attackers could hide malicious settings inside MCP server install links, giving them persistent access to developer machines through what appeared to be routine artificial intelligence tool installations.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/microsoft-code-editor-flaw-let-attackers-hijack-developer-pcs-image_small-6-a-31775.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on May 26, 2026.

Related Threats

MEDIUMAiNEW

OpenAI launches Codex plugins for finance pros

OpenAI has unveiled public equity investing and investment banking plugins for its Codex coding agent.

Finextra
MEDIUMAiNEW

Interactive Brokers launches agentic trading through Claude integration

Interactive Brokers (Nasdaq: IBKR), an automated global broker, today announced agentic trading through direct integration with Claude, one of the world’s leading AI platforms.

Finextra
MEDIUMAi

Instagram users locked out after Meta AI abused to steal accounts

Multiple Instagram users had their accounts hijacked after attackers convinced Meta's AI-powered support tools that they were the legitimate owners. [...]

BleepingComputer