
GitHub Actions Drops Node 20—Old macOS and ARM32 Runners Lose Support
GitHub removed Node 20 from Actions runners on September 23, 2026. JavaScript actions now run on Node 24, leaving older macOS and ARM32 self-hosted runners unsupported.
In-depth stories, expert insights and practical guides for what's next.

GitHub removed Node 20 from Actions runners on September 23, 2026. JavaScript actions now run on Node 24, leaving older macOS and ARM32 self-hosted runners unsupported.

Plugin4Shell can redirect a hash-pinned coding-agent plugin checkout to different code. Audit the resolved commit and installed files across installation routes, then limit plugin access.

Deleting all activity shown in Google My Activity can leave Chrome browsing history intact. Clear the account record and browser history separately, then check each device and profile you use.

Check Point confirmed attacks on two flaws on September 22, 2026. VPN gateways and management systems need separate fixes; LivePatch Takes 28 and 29 miss the management zero-day.

Palo Alto Networks announced Unit 42 Continuous Frontier AI Defense as available worldwide on September 22, 2026. In its tests, no single model found more than 40% of vulnerabilities in a complex environment.

Slackforce brings Salesforce data into Slack conversations, while Slack Code brings collaborative agent coding into them. Map what agents can read, change and retain before rollout.

Managing competing priorities involves more than working quickly. Teams require organized information, clear workflows plus effective deadline tracking.

Cloud Phone platforms have become essential for mobile-first work at scale: agencies running dozens of TikTok accounts, affiliates managing Instagram farms, creators posting across channels. Two names keep coming up: GeeLark and Multilogin.

CISA’s new guidance brings tripwires, breadcrumbs and honeytokens into Zero Trust detection. A useful first pilot starts with one governed alert that responders can investigate.

On September 18, 2026, Anthropic and Accenture unveiled an embedded evaluation team with employee-like access; each expects to invest at least $1 billion over five years.

On September 18, Google Cloud highlighted the general availability of its storage advisor, which flags four usage anomalies but requires configuration and IAM permissions to inspect them.

Google released the Gemini 3.8 Live models for developers on September 15. Extended Thinking speaks during background work, but clients must track when the full interaction—not just an utterance—ends.

DigitalOcean made PostgreSQL and MySQL Advanced Edition generally available on September 17, 2026. Failover avoids DNS delay, but applications still need reconnection logic.

The European Commission’s September 17 proposal would reserve autonomous social accounts for users aged 15 and over while extending child-safety duties to games and AI chatbots.

On September 16, Cisco confirmed active exploitation of a Cisco ISE and ISE-PIC zero-day. Fixed releases close the flaw, but suspect nodes may still require re-imaging.