VS Code 1.112 shipped March 18 with expanded Copilot agent autonomy controls. A new Autopilot permission level lets Copilot CLI run tasks without user approval dialogs. MCP server sandboxing restricts ...
A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser — and potentially leverage the IDE’s privileges to perform system tasks.