IT & AI brief, 6 November 2026: Apple flaw added to CISA KEV, Workspace auto-encryption beta

CISA added an Apple vulnerability, CVE-2024-27834, to its Known Exploited Vulnerabilities catalog on 4 November, with a federal remediation date of 18 November. Google and GitHub also shipped changes that admins running those platforms should review.

Apple CVE-2024-27834 joins the KEV catalog

What changed: CISA's Known Exploited Vulnerabilities catalog lists CVE-2024-27834 under "Apple Multiple Products", added on 4 November 2026 with a due date of 18 November. The NVD record describes a WebKit flaw that lets an attacker who already has memory read and write ability bypass Pointer Authentication. Apple fixed it in 2024.

Who is affected: Any iPhone, iPad, Mac or Safari install that never received the 2024 updates, including old managed devices and unmanaged personal devices that access company data.

What to do: Check your MDM inventory for devices on operating system or Safari versions from before May 2024 and push current updates. Retire or block devices that can no longer be updated.

Google Workspace can now apply client-side encryption by rule (beta)

What changed: Google announced in the Workspace Updates blog a beta of policy-based enforcement for client-side encryption. Rules in the Workspace rules engine can encrypt sensitive Docs, Sheets, Slides, Office files, PDFs and images in My Drive and shared drives, in place, so file URLs stay the same. The feature is off by default.

Who is affected: Customers with the Assured Controls or Assured Controls Plus add-on to Enterprise Plus who are accepted into the beta allowlist.

What to do: If you hold regulated data and already run an external key service, apply for the beta and test on one shared drive first. Everyone else needs no action. Users will see a banner saying an administrator added encryption, so tell them to expect it.

GitHub Copilot now works inside Xcode's coding assistant

What changed: In a GitHub changelog post, GitHub says Copilot is available in public preview inside Xcode's built-in coding assistant, starting with the Xcode 27.3 beta. It needs a Mac on macOS Tahoe 26.6 or later. The separate Copilot for Xcode extension remains available. Setup is under Xcode > Settings > Intelligence.

Who is affected: Developers on any Copilot plan who build for Apple platforms.

What to do: The post mentions no organisation policy controls, so review your Copilot policy and data-handling rules before developers install beta tooling on company Macs.

Copilot usage metrics now show who is missing telemetry

What changed: The Copilot usage metrics API now reports, per user, whether client telemetry arrived and whether each IDE and extension meets the minimum version for metrics, as described in the changelog. New fields include client_telemetry_present and usage_metrics_requirements, plus daily counts of affected users.

Who is affected: Enterprise and organisation owners, billing managers and holders of the View Copilot Metrics permission, with the usage metrics policy enabled.

What to do: Pull the per-user fields and contact people with outdated editors or extensions. Remember that proxies and firewalls blocking telemetry also cause gaps. A user can appear in both counts, so do not add them together.

Gemini in Google Forms analyses responses

What changed: Per the Workspace Updates post, Gemini in the Forms Responses tab can summarise results, spot trends and suggest next steps by running Python on the response data. Rapid Release domains began rolling out on 2 November. Scheduled Release domains start on 19 November. Visibility can take up to 15 days.

Who is affected: Business Standard and Plus, Enterprise Standard and Plus, and listed Education editions.

What to do: Users need smart features and personalisation turned on. Decide whether survey responses, which may include personal data, should be analysed this way, and adjust the setting in the Admin console if not.

Also worth knowing

• GitHub secret scanning added a SpaceX partner pattern and refined detectors for Alibaba, AWS, Google, OpenVSX, Pydantic and Tencent, which should reduce false positives (GitHub changelog).
• Google Vids now offers Gemini Omni 1.2 Flash with clips up to 15 seconds (Workspace Updates).