BLOCKING VS CODE EMBEDDED REVERSE SHELL BEFORE IT’S TOO LATE

Summary from the TLDR InfoSec newsletter

Microsoft added a tunnel feature to VS Code in July 2023 that allows users to share their Visual Studio desktop via the web. This is a prime utility for attackers to establish persistence. This article provides some methods to disable the usage of VS Code tunnel as well as some methods to detect its usage.