2024 Wiz — Visual Studio Code extension vulnerability disclosed in coordinated patch
Data compromised
Extension-local secrets/configuration for developers using the Wiz VS Code extension
Technical writeup
Wiz published security advisory material for a vulnerability in its VS Code extension and described remediation timelines; advisories state core Wiz platform was not impacted.
Root cause
Vulnerability in IDE extension distribution channel