How a critical Visual Studio Code vulnerability allows unverified extensions to run automatically, and learn how to secure your workstation.