Safety & RulesGitHub Copilot: local sandbox for agent commands at no extra cost
Local sandboxing for commands run by the Copilot agent is now generally available on Windows, macOS and Linux, at no additional cost, according to GitHub.
Source of truthgithub.blog/…/2026-10-07-local-sandboxi…Since October 7, local sandboxing is generally available in GitHub Copilot CLI, the GitHub Copilot app and VS Code sessions using Agent Host. According to GitHub, tools and commands started by Copilot run with restricted access to the filesystem, network and credentials, based on developer or organization policies. GitHub also says the sandboxing is powered by Microsoft eXecution Container (MXC), works on Windows, macOS and Linux, and can cover local MCP and language servers where supported. It is included with GitHub Copilot at no additional cost. Separately, starting in version 1.0.94-0, Copilot CLI can discover models from a running local Ollama instance; discovery does not add them automatically.
Other sources: github.blog/…/2026-10-07-discover-local…
Related stories
Microsoft: Storm-0940 group automated attacks with AI agents
According to Microsoft, Storm-0940, which it assesses as China-state aligned, used the open-source ARTEX framework to automate attacks targeting hundreds of organizations; most of the targeting was not successful.
LiteLLM: malicious version 1.107.0 published to PyPI and Docker
According to LiteLLM, version 1.107.0, pushed on October 21, contained malware that steals credentials. LiteLLM advises anyone who installed it on a host with outbound internet access to assume the data was exfiltrated and to rotate keys and secrets.