Skip to content
Threat Feed
Subscribe

Product

GitHub Copilot

4 briefs RSS
medium advisory

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

A vulnerability, identified as CVE-2026-47282, in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose sensitive information over a network due to insufficiently protected credentials.

GitHub Copilot +1 information-disclosure vulnerability development-tools
high advisory

ClickFix Campaign Activity

Tracking brief for the ClickFix campaign; individual sightings are folded in as reported.

open source packages +36 campaign clickfix
15i updated
high advisory

CVE-2026-41109: Improper Neutralization of Special Elements in GitHub Copilot and Visual Studio

CVE-2026-41109 describes an improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in GitHub Copilot and Visual Studio, allowing an unauthorized attacker to bypass a security feature over a network.

GitHub Copilot +1 injection cve github visual studio
2r 1t 1c
critical advisory

Elastic Defend Alert from GenAI Utility or Descendant

This rule detects Elastic Defend alerts originating from or directly related to GenAI coding utilities, indicating potential prompt injection, malicious skills, or supply-chain compromise.

Cursor +11 genai supply-chain elastic-defend
2r 1t