2026-09 - 17

2026 (12)

September (12)

github: Multiple trusted publishing configurations for npm

GitHub

2026-09-03

GitHub says three npm publishing updates are now generally available, including support for multiple trusted publishing configurations per package. The post also mentions staged publishing and another publishing-related change, but the provided excerpt does not include the full details.

github: GitHub Actions: Early September 2026 updates

GitHub

2026-09-03

GitHub Actions added three updates focused on workflow visibility and control. The post highlights a new REST API for runner version deprecations, but the provided excerpt does not include the full details of the other changes.

github: Upcoming deprecation of selected GitHub Copilot models

GitHub

2026-09-03

GitHub will deprecate selected Copilot models across all Copilot experiences on October 2, 2026. The affected models include Copilot Chat, inline edits, ask and agent modes, and code completions.

github: GitHub CLI Linux package signing key expires September 5

GitHub

2026-09-03

The GitHub CLI Linux package repository signing key expires on September 5, 2026. After that date, repository metadata in APT and RPM workflows will be affected starting with the first release published after expiration.

github: Gemini 3.8 Flash is now available in GitHub Copilot

GitHub

2026-09-03

GitHub Copilot now supports Gemini 3.8 Flash, Google’s latest Flash model. GitHub says early testing showed strong performance on complex terminal-based coding tasks.

k8s: Kubernetes v1.37: DRA Updates

Kubernetes Official Blog

2026-09-03

Kubernetes 1.37 adds several DRA updates, including GA support for extended resources, stable device taints/tolerations, and stable standardized NUMA node attributes. It also promotes multiple DRA features to Beta or Alpha, with focus areas including workload-level ResourceClaims, device metadata/status, scheduling performance, and fractional consumable capacity.

dotnet: Test what you ship: MSTest and Native AOT

.NET

2026-09-03

MSTest source generation now lets test projects run with the same Native AOT and trimming deployment model as the apps they validate. It also reduces reflection on the test execution path.

azure: [Launched] Generally Available: Azure Virtual Network Manager IPAM in additional Azure regions

Azure Updates

2026-09-03

Azure Virtual Network Manager IP address management is now generally available in additional regions: US Gov Virginia, US Gov Texas, US Gov Arizona, China North 3, and China East 3.

security: ASCII smuggling crosses over from AI prompt injection to phishing evasion

Microsoft Security Blog

2026-09-03

Microsoft reports that invisible Unicode characters, previously used in AI prompt injection, are now being used to hide words from email filters as part of phishing evasion. The technique relies on obfuscating text before parsers process it.

github: Reopening Copilot Business and Enterprise signups

GitHub

2026-09-03

GitHub is gradually reopening sign-ups for Copilot Business and Copilot Enterprise for customers paying by credit card or PayPal over the next few weeks. Availability is rolling out gradually to people who have been waiting to start.

github: CodeQL 2.26.4 improves GitHub actions security detections

GitHub

2026-09-03

CodeQL 2.26.4 is a new release that adds support for Go 1.27 and improves GitHub Actions security detections. It is part of the static analysis engine used by GitHub code scanning.

security: Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

Microsoft Security Blog

2026-09-02

Microsoft Threat Intelligence reported a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based implant. The campaign uses social engineering and legitimate tools to move from initial access to lateral movement, with Microsoft Defender used for detection and disruption.