
Security researchers have recently discovered an “easily exploitable” flaw in the Microsoft Visual Studio installer, which could be used by malicious actors to impersonate legitimate publishers and distribute malicious extensions. This vulnerability, known as CVE-2023-28299, was addressed by Microsoft as part of its Patch Tuesday updates for April 2023, but experts warn that the problem could still exist in some