BSidesSF 2026 - Hunting Malicious IDE Extensions: Building Detection at Scale... (Vinod Tiwari)

Hunting Malicious IDE Extensions: Building Detection at Scale Across Developer Workstations

Vinod Tiwari

Developer machines run IDE extensions with extensive permissions to access credentials, source code, and production systems. This talk presents a practical detection system to inventory extensions across VS Code, Cursor, and JetBrains IDEs, maintain an allowlist, and alert on threats in real-time.

https://bsidessf2026.sched.com/event/ff197c1246d358d3dd9bc280e82b0b5d

Видео BSidesSF 2026 - Hunting Malicious IDE Extensions: Building Detection at Scale... (Vinod Tiwari) канала Security BSides San Francisco