VS Code flaw lets attackers reuse deleted extension names, enabling ransomware payload delivery and supply chain risks.

Documents examined by researchers show how one company in China has collected data on members of Congress and other influential Americans.