IT & AI brief, 31 October 2026: Ivanti Connect Secure on KEV, Copilot bundled into GitHub Enterprise

Two Ivanti Connect Secure vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog on 30 October, one with a deadline of 2 November. On the developer side, GitHub Enterprise now includes Copilot for every licensed user, and GitHub Agentic Workflows are generally available.

CISA KEV: two Ivanti Connect Secure flaws, one due 2 November

What changed: On 30 October CISA added CVE-2026-111357 and CVE-2026-118527, both in Ivanti Connect Secure, to the KEV catalog. The catalog lists due dates of 2 November 2026 for the first and 13 November 2026 for the second. A due date this close to the listing date is a strong sign that exploitation is under way. The catalog entry does not name fixed versions, so take those from the vendor advisory.

Who is affected: Organisations that run Ivanti Connect Secure as their VPN or remote access gateway, particularly appliances reachable from the internet.

What to do: Open the Ivanti security advisory, identify the fixed release for your version, and patch before the weekend ends if you can. Afterwards, check appliance logs and integrity tooling for unexpected admin activity, and rotate credentials that passed through the gateway if you find anything suspicious. If you cannot patch, limit management access to trusted networks.

GitHub Enterprise now includes Copilot

What changed: GitHub announced on 28 October that Copilot is bundled with GitHub Enterprise for every licensed user, so seat counts for Copilot no longer need separate management. Usage is metered against the enterprise budget from the first request. The bundle has Copilot Enterprise features but no monthly AI credits per seat. Code completion and next edit suggestions keep working when the budget runs out, while Copilot Chat, code review and the cloud agent need available budget.

Who is affected: Enterprises on GitHub Enterprise Cloud that work with a GitHub or Microsoft account team can use it now. Self-serve subscribers are not yet included, and dates are due in the coming weeks.

What to do: Existing Copilot Business and Enterprise plans remain available, so nothing changes automatically. If you plan to move, set enterprise budgets, alerts and policies first, because there is no included allowance to absorb heavy use.

GitHub Agentic Workflows are generally available

What changed: On 28 October GitHub released Agentic Workflows as generally available. You describe automation in Markdown, and it compiles to standard Actions YAML that runs a coding agent for tasks such as issue triage, CI failure analysis and documentation updates. New since preview: self-hosted ARC runner support, model routing, and stronger isolation for agents. Agents run read-only by default, behind a firewall, and a threat detection job scans proposed changes before they apply.

Who is affected: Teams on GitHub Free, Team and Enterprise using Actions. The default Copilot CLI engine needs a Copilot licence, though other coding agents can be used.

What to do: Pilot it on a low-risk repository, review the permissions and outputs it is allowed to produce, and keep the read-only defaults until you trust the results.

GPT-6.1 Terra arrives in GitHub Copilot

What changed: GitHub made GPT-6.1 Terra generally available in Copilot on 26 October, with a gradual rollout. It is positioned for everyday agentic coding at lower cost than GPT-6.1 Sol and is billed at provider list pricing.

Who is affected: Copilot Pro, Pro+, Max, Business and Enterprise users across supported editors, the CLI, github.com and mobile.

What to do: On Business and Enterprise, new models are switched on automatically unless the default is disabled or the model is explicitly blocked. If your policy requires approval for new models, check the model policy in Copilot settings and watch usage costs. For model comparisons, see /blog/chatgpt-team-vs-claude-team-vs-gemini-business-pricing.

Gemini can edit whole presentations in Google Slides

What changed: The Google Workspace Updates blog posted on 30 October that Gemini in Google Slides can now edit several slides, or an entire deck, from a single prompt in the side panel.

Who is affected: Workspace users who have Gemini features in Slides. The post summary does not list edition details here, so check the full announcement for your plan.

What to do: No action needed. If you govern Gemini use, remind staff to review AI-edited decks before sharing them externally, and confirm your Gemini admin settings match your policy.

Also worth knowing

• Google Workspace also rolled out file creation, preview and editing inside the Gemini app on 29 October.
• The Workspace blog's 30 October recap notes that Fill with Gemini in Sheets now gives cell-level citations for web sources.
• GitHub made Copilot assisted permissions generally available on 26 October.