From the high-speed sweeps of COTA to the thin air of Mexico City and the compact chaos of Interlagos, which drivers and teams deserve a place in your F1 Fantasy line-up?
Unknown crims compromised LiteLLM's release process on Wednesday, distributing a malicious version (1.107.0) containing malware designed to steal cloud and AI credentials and a remote access trojan (RAT) capable of executing arbitrary code on infected machines through PyPI and Docker registries. PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but anyone who ran the compromised package on any platform should assume their secrets have been stolen. “Check for /tmp/.pc_once_* (the exfil has already fired if this file exists) and /tmp/remote_code_loader.lock (the C2 daemon ran or is still running if this file exists),” advised Aikido Security malware hunter Ilyas Makari. “The same applies to anyone who ran the official Docker image litellm/litellm:1.107.0, or pulled it via the latest, main-latest, or main-stable tags.” The most recent safe version is v1.106.2. While it’s too early to tell the scale of this latest LiteLLM supply chain attack – an earlier LiteLLM compromise in March potentially exposed more than 2,500 organizations and 434,000 CI/CD pipelines worldwide, according to CloudSEK – make sure to take these measures seriously, and check environments for any indicators of compromise. Aikido, Google’s Wiz cloud security biz, and supply-chain security provider Socket have all published extensive threat-hunting and mitigation instructions for LiteLLM users and security teams, so give those a read stat. LiteLLM, developed by BerriAI, provides a common interface for LLM providers, including OpenAI, Anthropic, and Google Gemini, and receives about 23 million weekly downloads. This means a compromised installation can run alongside LLM provider API keys, cloud identities, and database connection strings - and expose a ton of valuable credentials, secrets, and other sensitive data to whoever uploaded the malicious package. “Teams using 1.107.0 should stop deploying it and investigate environments where Python ran after installation, including proxy containers and CI runners,” Socket researchers said on Wednesday. The malicious version was uploaded at 11:39 UTC, and according to Wiz kids Benjamin Read and Rami McCarthy, the payload originates with malicious commits made on github.com/Berri-AI/litellm, which is a hyphenated variant of the legitimate BerriAI organization. Miscreants used this repo to inject the three malicious files into the LiteLLM release pipeline. These, according to Makari, include cook.pth, which causes the second file, cook.py, to run automatically every time Python is invoked on the machine, without any additional user action. Meanwhile, cook.py contains the infostealer, and the third file, sitecustomize.py, is the RAT. Python also executes the RAT at interpreter startup, and this file spawns a background daemon that polls the attacker's infrastructure every hour for new commands to execute. Upon executing, the infostealer harvests a ton of sensitive data across 16 modules targeting browsers, cloud providers, and AI services, according to Read and McCarthy. It steals browser credentials and cookies from Chrome, Firefox, Edge, and Safari, along with AWS credentials from ~/.aws/, environment variables, and EC2/ECS instance metadata (IMDS). It also collects users’ Google Cloud Platform service account keys and application default credentials, along with Microsoft Azure tokens from the CLI cache. And then it also swipes API keys for OpenAI, Anthropic, Cohere, and other LLM providers, plus SSH private keys, GPG keys, and shell history files. The malware then encrypts all of this stolen data using AES-256-CBC, wraps the encryption key with an RSA-4096 public key, and sends the encrypted data via HTTP POST to an attacker-controlled domain: http://www[.]litellm[.]dev/healthcheck. BerriAI did not respond to The Register’s inquiries. This is an emerging story, and we will continue to update it as we learn more details.®
Bondi Beach, a neighborhood east of central Sydney, is about as iconic a surf spot as they come. Its eponymous crescent beach glows with golden sand, and its cliffs frame stunning scenery. In December 2025, it was also the site of a tragic terrorist attack, when two men opened fire on a Hanukkah celebration, killing 15 people. (Gun deaths, let alone mass shootings, are exceedingly rare in Australia, especially compared to the U.S.) At Bondi, heroism and a sense of community converged in its beautiful setting, reinforcing pride of place. And it’s again home, at least temporarily, to “the world’s largest free to the public sculpture exhibition.”
Sculpture by the Sea organizes an annual outdoor presentation of dozens of sculptures every year along a 1.25-mile stretch of coastline, highlighting work by artists from around the world. Styles and materials vary greatly, from geometric abstraction to myriad representational forms. Emma Anna’s “DREAM_N” resembles a giant Scrabble letter rack, while Andre Braun’s “Surface Breach” depicts a giant hand breaking free from the earth.
The show remains on view through November 2. Explore past editions and watch a video of sculptures from last year’s exhibition below. See more on Instagram.
Do stories and artists like this matter to you? Become a Colossal Member today and support independent arts publishing for as little as $7 per month. The article Dozens of Sculptures Dot Bondi Beach in the 2026 Sculpture by the Sea Exhibition appeared first on Colossal.
Precautionary takedowns come as experts say bad actors could exploit vulnerability in language used by 70% of sites
Websites around the globe have gone dark after a serious vulnerability was found in a computer language used to build much of the world wide web.
Dutch, German, Belgian, Finnish and French sites were among those that governments took down temporarily as they scrambled to patch the critical weakness in PHP, a language used by almost 70% of websites.
Continue reading...Jack Ross was filmed allegedly discussing with an undercover reporter violent options to deal with enemies
A former Conservative election candidate has been suspended from the party after he was seemingly filmed discussing the cost of hiring contract killers and offering to “broker” the services of a far-right activist with alleged paramilitary links.
Jack Ross was filmed apparently asking an undercover reporter “What do you want done?” before listing the type of violent options that could be bought.
Continue reading...
banzainetsurfer has added a photo to the pool:
Oharaimachi (おはらい町) is the traditional approach to the Inner Shrine of Ise. Nearly one kilometer long, it is lined by many traditional style buildings, housing shops and restaurants. Some of the businesses found here have been serving pilgrims and tourists for several centuries.
Source: www.japan-guide.com/e/e4302.html
Workers realized the statue was too large for the smaller square when attempting to install it there, the Vladivostok city hall’s press service said.
De gemeente Dordrecht blijft optreden tegen permanente bewoning op vakantiepark Europarcs. Dat schrijft burgemeester Nanning Mol in antwoord op vragen van politieke partij Beter voor Dordt, die had gevraagd de handhaving voorlopig stil te leggen.
