noticias ia para empresas ciberseguridad agentes de ia

A key that LiteLLM, a widely used gateway between business apps and AI models, forgot to revoke in May ended up powering a poisoned release in October that steals credentials the moment Python starts. Computing capacity is now booked years ahead: Amazon has sold nearly all of its cloud capacity through 2027, and in Spain, Telefónica and Indra are exploring a sovereign cloud of their own. And the industry's money is moving in two directions: Meta is buying analytics startup Sundial and will cut off its customers, while Spanish venture firms are launching nearly €900 million in new funds. This follows the Saturday, October 24 radar.

A key forgotten in May turned LiteLLM into a credential thief: inventory your agents' keys

LiteLLM, an open-source tool that many companies use as a gateway between their applications and model providers like OpenAI or Anthropic, has published a full account of how attackers slipped a malicious release past it. On May 27, a configuration file accidentally pushed to a public repository exposed the master key to an internal platform the team used to orchestrate agents; they deleted the file but never revoked the key. On October 10, an attacker used it, and the platform handed back the GitHub token of one of the organization's owners, which it used to open code changes and which had never been scoped down. With that access, the attacker stole two other developers' tokens and, on October 21, 147 days after the leak, exploited approval rules that had been loosened that week to publish the poisoned version 1.107.0. It sat on PyPI, the official Python package repository, for under two hours, and a little longer in its Docker images. Microsoft, which analyzed it, says the malicious code runs as soon as Python starts on an affected machine, even if the application never uses LiteLLM, and goes after keys for AI providers, cloud services, GitHub, coding assistants and browsers; deleting the package isn't enough. For your business: ask your tech team or IT provider today whether any of your systems run LiteLLM and whether it was installed or updated on October 21. If so, every key that machine could reach has to be changed, and from a different, clean computer. Even if you don't, build the list LiteLLM didn't have: every key your agents and automations use, who created it, what it can access and when it expires. A leaked key gets revoked the same day, not "later." An agent running on the owner's key isn't UNATTENDED: it's an open door waiting for someone to find it. Source

Amazon has sold nearly all its cloud capacity through 2027: AI compute is booked years ahead, and Spain is exploring its own

Amazon CEO Andy Jassy said Friday on an Andreessen Horowitz podcast that AWS's computing capacity for 2026 is already sold out, that 2027 is "largely sold out" and that "a good chunk" of 2028 is too, driven by demand from AI labs and enterprises. Amazon holds some back for on-demand use and for Bedrock, its AI model service; it plans to spend about $220 billion on capital expenditure this year and reports earnings on October 29. The same day, after a Bloomberg report, it emerged that Telefónica and Indra are in preliminary talks on a sovereign cloud joint venture built mostly on European technology, buying GPUs from outside the EU only when there's no European alternative, and aimed at government agencies, critical infrastructure and large companies; Indra calls them "exploratory" and they are not expected to materialize in the short term. For your business: the giants lock in capacity for years and you get what's left, which is where usage caps and price hikes show up. Ask your AI provider, in writing, what your usage quota is and what happens when you hit it, and make sure your key processes also run on a second model from a different provider. If you handle sensitive data, also ask which region it's processed in. A process that stalls when your provider throttles you isn't UNATTENDED: it depends on there being room left. Source

Meta buys Sundial and will close it to customers: if your reports live in a startup, have your exit ready

Meta has acquired Sundial, an AI data analytics platform founded by two former Meta executives, a company spokesperson confirmed; terms weren't disclosed. Sundial turns natural language questions about complex data into actionable insights, via a chat plugin, so any team can analyze its own data without waiting on the data department. Its founders, Julie Zhuo and Chandra Narayanan, and the rest of the team are joining Meta's new data analytics unit, led by Alex Schultz, and the platform will stop serving external customers once the deal closes. It's the harsh version of the vendor-changes-hands story we covered on Thursday, October 22 with Salesforce and Braze: here the buyer doesn't raise the price, it switches the product off. For your business: if a dashboard, a weekly report or an agent depends on a startup's tool, check today that you can export your data, queries and settings in a format another tool can read, and get a minimum notice period written into the contract in case the vendor is acquired or shuts down. If your reports only live inside someone else's tool, they aren't INTEGRATED: they're on loan. Source

Spanish venture firms launch nearly €900 million in funds for AI and deeptech startups: more cash for European software

Spanish venture capital firms have launched new startup funds totaling nearly €900 million in recent days, driven by AI and deeptech, meaning technology built on hard scientific and engineering advances. The largest is Seaya Nova, Seaya's first mega-fund: a first close of €600 million to invest €20 million to €50 million per company in Series B to D rounds for European tech firms, backed by the European Investment Fund. Big Sur Ventures is launching its fourth fund, €100 million for seed-stage deeptech, half of it in Spain; Nauta has made a €60 million first close on a fund targeting €150 million to €200 million, focused on business software and deeptech, with SETT, the state tech investment arm under Spain's Digital Transformation Ministry, among its backers; and Enzo Ventures has raised €20 million for the very earliest stages. For your business: money is flowing to help European business software vendors grow, which means more options for keeping your data in Europe. When choosing a startup as a provider, ask what the demo won't tell you: who funds them, how many months of runway they have and what happens to your account if they get acquired. The one that raises money grows; the one that gets bought, like Sundial, may shut down. Source

What to watch next

This week Microsoft reports earnings on the 28th and Amazon on the 29th, and we'll see how much more they're pouring into capacity. LiteLLM has also promised to explain next week what it's changing in its release process, and on the 27th it will disclose another vulnerability it has already patched for its enterprise customers.