SECURITYTHE HACKER NEWS
VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
Microsoft has introduced a two-hour delay for automatic updates of Visual Studio Code extensions to mitigate software supply chain threats. This change aims to add an extra layer of protection by preventing immediate updates to newly published versions.
Related Signal
Adjacent reporting
- Chainguard Unveils Factory 2.0 to Automate Hardening the Software Supply Chain
- Microsoft announces product it doesn't want you to buy: Extended security updates for old Exchange, and Skype for Biz
- Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare
- Forced Windows updates can now be paused forever
- Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately
- Progress Patches Critical MOVEit Automation Bug Enabling Authentication Bypass