Hackers compromised the LiteLLM project’s PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
The supply-chain attack affected all PyPI wheels (.whl installation packages) for LiteLLM version 1.107.0, impacting Windows, Linux, and macOS systems.
LiteLLM is an open-source Python SDK and AI gateway that enables applications to access AI models from different providers through a common API.
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI installers, and MFA phishing, explaining why faster detection and automated containment are critical.
Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday.
Tracked as CVE-2026–109618 and CVE-2026–109619, the two critical vulnerabilities let attackers gain remote code execution (RCE) on vulnerable systems. The PHP security team patched them on October 21 after urging admins one day earlier to prepare to install the updates as soon as they became available.
PHP core developer Gina Peter Banyard warned before disclosure that applying the official security patches is the only permanent defense, while the UK National Cyber Security Centre (NCSC) asked UK organizations to immediately update PHP servers or take them offline until they can be patched.
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers.
This security issue is tracked as CVE-2026–110264 and was reported by a security researcher using the ‘joaxcar’ handle through GitLab’s HackerOne bug bounty program.
CVE-2026–110264 stems from an integer overflow weakness in GitLab’s Regular Expression Compiler, a background engine that parses and validates regular expressions in configuration files.
An interesting story of a company which has engineered bacteria to make nanobodies and prevent necrotic enteritis in poultry. They are also expanding into other animal health areas like canine medicine!
BiomEdit’s engineered probiotic is now in more than 35 million broilers. The pitch is not fewer dead chickens. It is feed conversion, which is where the $6 billion actually hides.
Great to hear that prime editing has advanced to the clinic!
Application of the high-precision technique is part of a clinical trial to treat a genetic disease that can cause liver and nerve damage.
What happens when AI begins proving mathematical theorems faster than humans can? Mathematics may be on the verge of a transformation—but its future could belong to the next generation of mathematicians.
In a new essay published on Terence Tao’s blog, NYU mathematician Tristan Buckmaster offers an optimistic perspective on how AI-generated proofs could reshape mathematical research.
He argues that graduate students and postdoctoral researchers will play a crucial role in determining what comes next.
Buckmaster draws a parallel with IBM’s Deep Blue defeating world chess champion Garry Kasparov in 1997. Computers did not make chess obsolete. Instead, increasingly powerful engines transformed how people study, analyze, and play the game.
He suggests that mathematics could undergo a similar transformation, though with an important distinction: proving a theorem is not the same as understanding why it is true. Mathematical progress involves not only establishing correct results but also developing the intuition, insights, and conceptual frameworks behind them.
The essay also raises concerns about the concentration of advanced AI capabilities in a handful of corporations. Buckmaster advocates broader access to these tools, proper attribution, and stronger protections for researchers’ intellectual contributions.
Technion researchers have presented evidence for the existence of solar-storm-like outbursts near supermassive black holes, which can be a million times larger than the sun or more. The phenomenon was discovered in the vicinity of the black hole in the galaxy NGC 3783, and the researchers’ findings were published in The Astrophysical Journal Letters.
The Epoch of Reionization is when radiation from early galaxies and their stars reionized neutral hydrogen and let light travel freely through the cosmos. Some research shows that supernovae helped the process. But new research shows that, though they may have helped initially, supernovae eventually slowed reionization.
Rejuvenation breakthrough: Scientists reverse 60 years of aging in human cells.
Turning Back the Biological Clock.
Scientists have long searched for ways to transform ordinary human blood cells into specialized brain stem cells. A major breakthrough in this field is direct conversion—a technique that rewires blood cells directly into induced neural stem cells (iNSCs) using specific cellular master switches (‘SOX2‘ and ‘cMYC‘), completely bypassing the complex embryonic-like pluripotent stage. While researchers knew this process seemed to “wash away” biological aging, key questions remained: How fast does this rejuvenation actually happen, and how completely do these new brain stem cells shed their past?
Key findings: a slow and steady rejuvenation.
To find out, researchers took blood cells from donors across an extraordinary age spectrum—from newborns all the way to a 101-year-old—and turned them into iNSCs. Using epigenetic “aging clock” algorithms that estimate biological age based on DNA modifications, they tracked the transformation over time.
* Dramatic Age Reversal: The blood cells underwent massive epigenetic de-aging. Early-stage converted cells retained only about 13% of the original donor’s age, and as the cells continued to divide, that number dropped to just 5%. A 101-year-old’s blood cell effectively became biologically “young.”
* A Protracted Process: Rejuvenation wasn’t an instant switch. The process unfolded gradually over several weeks—even when cell division was intentionally paused.