In today's episode, host Jim Love discusses the discovery of the 'Glass Worm,' a self-spreading malware hidden in Visual Studio Code extensions downloaded over 35,000 times. The worm, hiding its malicious JavaScript in invisible unicode characters, steals developer credentials and drains crypto wallets. He also covers the security flaws in AI-powered IDEs like Cursor and Windsurf, leaving 1.8 million developers vulnerable. Lastly, a new survey from ISACA reveals that AI-driven attacks are now the top cybersecurity concern for 2026, overtaking ransomware and insider threats. Love advises how developers and security teams can mitigate these threats.
00:00 Introduction and Shoutout
01:10 Cybersecurity Headlines
01:46 Glass Worm Malware in Visual Studio Code
04:06 AI-Powered IDEs with Security Flaws
06:00 AI-Driven Cybersecurity Threats
07:50 Conclusion and Contact Information