SAFEGUARDING VS CODE AGAINST PROMPT INJECTIONS

Summary from the TLDR InfoSec newsletter

Prompt injection attacks in VS Code's Copilot Chat could allow malicious actors to leak data or execute code by embedding crafted prompts in GitHub issues. GitHub responded with security improvements like enhanced confirmation flows, tool execution restrictions, and sandboxed environments. The post also recommends Workspace Trust and containerization as defenses, emphasizing the need for ongoing protection as LLM threats evolve.