Friday BriefingNo. 01
Week 43 ·
Malware in LiteLLM, the AI Act's first harmonised standard and a Fabric deadline
A widely used AI proxy shipped malware, the AI Act got its first harmonised standard, and Fabric data agents in Foundry need moving before 6 November.
Three topics of the week
- Security
Topic 1: LiteLLM 1.107.0 shipped with credential-stealing malware
What happened
Attackers got into LiteLLM's release pipeline and pushed a malicious 1.107.0 to PyPI and Docker Hub on 21 October. The PyPI package was up from 11:39 to 13:23 UTC, the Docker tags until 14:20 UTC.
What it means
A LiteLLM proxy usually holds the keys for every model provider it talks to. If 1.107.0 ran anywhere in your stack, treat that environment as compromised, rotate every key and go back to 1.106.2.
Update, 23 OctoberLiteLLM now gives a different cause. A master key that was accidentally made public in May and never revoked got the attacker a GitHub org owner's token.
SourceLiteLLM security incident(opens in a new tab) - Regulation
Topic 2: EN 18286 is the first harmonised standard under the AI Act
SourceEU Digital Strategy(opens in a new tab)What happened
The Commission has published the reference to EN 18286:2026, a CEN and CENELEC standard for AI quality management, in the Official Journal. Providers of high-risk AI who follow it get a presumption of conformity for the parts of Article 17 it covers.
What it means
Article 17 is aimed at providers, so companies that only use AI don't pick up a new obligation here. If you already run a management system under ISO 9001 or ISO/IEC 42001, the standard builds on it rather than replacing it.
- BI
Topic 3: Fabric data agents in Foundry have to move before 6 November
SourceMicrosoft Fabric blog(opens in a new tab)What happened
Microsoft has released “Advanced NL2SQL” and “Advanced DAX generation” for Fabric data agents, and the core improvements reach the standard runtime between 2 and 10 November. From 6 November, plugging a data agent into Microsoft Foundry as a custom tool is no longer supported.
What it means
The replacement, the Fabric IQ tool, is still in preview itself, but it lets one Foundry agent use several data agents instead of just one. Test with real questions after the move, especially as the runtime changes from 2 November too.
In brief
- Tracking
Norway's data protection authority fined Xandr EUR 8.6 million for relying on Grindr's invalid consent in real-time bidding. As a joint controller, Xandr should have checked that consent itself.
EDPB(opens in a new tab) - BI
File upload in Databricks Genie One and Genie Agents is now generally available. Admins no longer have to switch on a preview for it.
Databricks release notes(opens in a new tab) - Data
Snowflake now upgrades Iceberg v2 tables to v3 in place. The only way back is Time Travel within the retention period, and only for Snowflake-managed tables.
Snowflake release notes(opens in a new tab) - Data
DuckDB 2.0 is a long-term support release, maintained until at least October 2027. Support for 1.4 ends on 17 November, while 1.5 is kept going until March 2027.
DuckDB(opens in a new tab) - AI
Anthropic has handed the open Agent Skills standard to the Agentic AI Foundation, which sits under the Linux Foundation.
Anthropic(opens in a new tab)
Can wait
OpenAI models in Google Cloud's Model Garden
Google is adding GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna to Model Garden, billed through Google Cloud Marketplace. For now it's a private preview for selected enterprise customers. Zero data retention and Confidential Compute are listed as coming soon, and Google hasn't said which regions it will run in.
SourceGoogle Cloud blog(opens in a new tab)Our unsolicited opinion
A proxy like LiteLLM takes an hour to set up and then gets forgotten, even though it holds more keys than almost any other system you run. We'd treat it like a database full of credentials, with a pinned version and someone who owns it.