Copilot

20 Feb 2026

InfoSec News Nuggets 02/20/2026

Critical Flaws Found in Four VS Code Extensions with Over 125 Million Installs Researchers disclosed multiple serious vulnerabilities in four widely used Microsoft Visual Studio Code extensions that collectively have over 125 million installs. The flaws could let attackers exfiltrate local files and run arbitrary code on developer machines. Users are urged to audit installed extensions and apply patches or remove risky ones until fixes are available. Microsoft 365 Copilot Vulnerability Exposes Sensitive Emails…

16 Jan 2026

By Mary

InfoSec News Nuggets – 01/16/2026

Critical WordPress Plugin Flaw Under Active Exploitation A maximum-severity vulnerability in the WordPress plugin Modular DS is being actively exploited in the wild, according to security firm Patchstack. The flaw, tracked as CVE-2026-23550, carries a CVSS score of 10.0 and allows unauthenticated attackers to escalate privileges and gain administrator access due to a flawed routing mechanism. The plugin, which has more than 40,000 active installs, exposes API routes under the "/api/modular-connector/" prefix that can be…