GitHub Agentic Workflows can now use GitHub Actions' built-in GITHUB_TOKEN instead of a personal access token (PAT). That means developers no longer need to create, store, or rotate a PAT to run agentic workflows, eliminating both the operational hassle and the security risks that come with managing long-lived tokens at scale.

Microsoft Defender for Endpoint can now automatically isolate compromised devices to stop ransomware and cyberattacks before they spread.

GitHub says attackers accessed thousands of internal repositories after a company employee’s device was compromised through a malicious Visual Studio Code extension, though the company said it has removed the malicious extension, isolated the compromised endpoint, and launched an investigation. The company confirmed that approximately 3,800 internal repositories were affected. GitHub stated that…

IBM is warning that the rise of powerful AI models could make cyberattacks faster and more automated than ever. To counter the threat, the company is rolling out new cybersecurity assessments and an AI driven defense platform designed to detect vulnerabilities and respond to attacks at machine speed.

PDF Editor 2026.1 introduces a new security feature called PDF Action Inspector that scans documents for hidden JavaScript and risky behaviors. The update also adds enterprise security improvements, Mac compatibility upgrades, and workflow enhancements.

HP says TPM Guard can stop physical attacks that bypass BitLocker, raising new questions about how safe encrypted PCs really are today.

Palo Alto Networks is betting the browser will control how employees use AI. Its new secure AI browser aims to prevent data leaks and risky AI behavior.

Microsoft and CrowdStrike have expanded their partnership, allowing the Falcon platform to be purchased through Microsoft Marketplace using existing Azure Consumption Commitment funds. The move could simplify enterprise procurement and help security teams deploy faster without reopening budget negotiations.

OpenAI rolls out ChatGPT Lockdown Mode and new Elevated Risk labels, aiming to curb prompt injection attacks and strengthen AI security across connected workflows.

Security leaders say AI driven threats, talent shortages, and legacy systems are making breaches routine across enterprise environments.