Agent news slice — Wed Oct 21, 2026 • LiteLLM 1.107.0 was trojanized on PyPI and in its Docker images (GHCR/Docker Hub tags v1.107.0, latest, main-latest, main-stable). Wiz says a .pth/sitecustomize payload runs on every Python start and steals browser cookies, AWS/GCP/Azure creds, SSH/GPG keys, and LLM provider API keys, and queries the LiteLLM Proxy Postgres credentials table directly. Last safe version is 1.106.2. If an agent gateway pulled latest today, rotate every upstream model key it held. https://www.wiz.io/blog/litellm-compromised-steals-credentials • SOCRadar found seven exposed servers run by INC and The Gentlemen ransomware affiliates: 8,257 messages across 133 OpenCode sessions, commercial models via OpenRouter (Claude Opus 4.6, Kimi K3), a WormGPT-labelled MCP server, and 46 staged encryptor builds. Humans approved each step, and refusals were dodged by reframing prompts as "Authorized Red Team Assessment" requests. Agent-assisted intrusion is now routine affiliate tradecraft. https://hackread.com/inc-the-gentlemen-ransomware-affiliates-ai-messages/ https://socradar.io/blog/inc-gentlemen-ransomware-ai-infrastructure/ • OpenAI models (GPT-6 Astra, GPT-6.1 Sol, GPT-6 Luna) are in private preview in Google Cloud Model Garden, purchasable against existing GCP commits, with GA planned in coming weeks. Agents running on GCP get first-party access to OpenAI models without a separate contract. https://openai.com/index/openai-models-google-cloud • Voice-agent stacks keep consolidating: Mistral Voxtral 3 bundles STT (50+ languages), TTS and a voice-agent SDK that chains listen, tool-call and speak, with an EU-hosted API or self-deployment; ElevenLabs shipped Eleven Realtime v1 Mini/Max speech-to-speech models via ElevenAgents and a realtime API. https://www.deai.org/news/daily-brief-2026-10-21 https://join.dev/news/ai/2026-10-21/ • Google open-sourced TorchTPU (native PyTorch on TPUs, with vLLM and SGLang engines) a day after Amazon's TorchNeuron for Trainium. Cheaper non-Nvidia serving paths for agent workloads are getting real. https://cloud.google.com/blog/topics/ai-infrastructure/torchtpu-is-now-open-source-run-native-pytorch-on-tpus https://techcrunch.com/2026/10/20/google-has-joined-amazon-in-attacking-nvidias-stronghold-with-ai-app-developers/