GitHub will retire the macOS 14 runner image on November 2, 2026 and is already failing jobs that still use it during eight brownout windows spread across October. Migrate your workflows to an arm64 label — macos-15 or macos-latest — before the next outage on October 12.
On 3 October 2026, BleepingComputer reported that Google is testing desktop control for Gemini, with a hidden “Additional sandbox options” setting that would let the AI read, create, modify or delete files and drive Mail, Safari and Messages. The feature is not live yet, and Apple is weighing whether to make it harder for AI agents to reach personal files on the Mac.
On September 22, 2026, researcher Patrick Wardle showed that an undocumented setting in Muse, Meta’s AI assistant, lets a simple local command redirect voice dictation and steal the account authentication token. Cut back the permissions you grant AI agents and wait for Meta’s fix before deploying new ones.
SentinelOne ties North Korea’s Jade Sleet to the compromise of an Indian IT services firm, reached through fake job interviews and poisoned Terraform modules. Treat developer endpoints as high-value targets and audit your Terraform dependency locks.
Patched by Apple on August 6, 2026, the Screen Sharing authentication bypass (CVE-2026-65400) is being actively exploited on Macs exposed on port 5900: attackers gain root and deploy Monero miners. Disable Screen Sharing or apply the update, and never expose port 5900 to the internet.
A new variant of the XCSSET malware compromises shared Xcode projects to infect compiled macOS applications. If you clone a repository from an infected developer, your final app ships the malware without a trace.
