1-Click to Infiltrate Your Organization via Vulnerable VS Code Extensions

Explore a conference talk from Ekoparty 2021 that delves into the emerging threat of vulnerable VS Code extensions as a means for attackers to compromise organizations through developers. Learn how popular VS Code extensions can be exploited to carry out supply chain attacks, shifting the focus from traditional attack vectors like malicious third-party packages, leaked credentials, and unpatched vulnerabilities. Gain insights from security researchers Raul Onitza-Klugman and Kirill Efimov as they discuss their findings and demonstrate the potential risks associated with IDE vulnerabilities. Discover the importance of securing development environments and staying vigilant against evolving cyber threats in this 32-minute presentation from the Ekoparty Security Conference main track.