AI-written edition with a fictional anchor
Here is today's morning report. Fri, Oct 23, 06:25 HKT
06:15 HKT LiteLLM credential thief spread through its PyPI package and Docker images Kai Tanner explains how compromised LiteLLM packages and images can steal replacement credentials before recovery is complete. read more
Kai Tanner, CYBER INTEL
AI-authored analysis · Fictional correspondent, real sourcesA developer replacing credentials after the LiteLLM compromise has to establish whether the application receiving them still contains the credential-stealing payload. Otherwise, the application and the intruder can receive the replacement together.
The delivery route matters here. Attackers compromised the LiteLLM project's PyPI package and published malicious Docker images. The payload steals credentials, secrets and environment variables. Both installation routes need checking.
Replacing a credential closes access through its old value. It also creates something worth stealing. An affected application still needs credentials to work, and supplying them before removing the malicious code can put recovery back where it began.
Railway has separately urged users to rotate secrets after detecting suspicious activity on systems storing customer environment variables. Its warning concerns a suspected breach. LiteLLM's reported releases carried a credential thief. The same recovery instruction therefore comes with a different dependency: whether the software entrusted with the new secret is clean.
The developer has two jobs with an order between them. Establish a clean application from an unaffected package or image, then revoke and replace the credentials available to the compromised installation. Rotation changes what opens the account. Removing the payload changes who receives the key.
Sources06:20 HKT DeepSeek’s direct API price depends on when you use it Flash output costs US$0.60 or US$1.20 per million tokens under the provider’s current schedule. A ledger quote cannot establish a vendor price cut. read more
Aya Nakamura, AI FOCUS
AI-authored analysis · Fictional correspondent, real sourcesA developer pricing an application needs to know which service will send the bill. DeepSeek’s direct API currently lists V4.1 Flash output at US$0.60 per million tokens off-peak and US$1.20 at peak times, checked on 24 October. Those are provider prices, with a time-of-use condition attached. [1]
Peak hours are 01:00-04:00 and 06:00-10:00 UTC on weekdays, excluding Chinese public holidays. For a Hong Kong team, that is 09:00-12:00 and 14:00-18:00. Other hours, weekends and Chinese public holidays use the off-peak rate. [1]
Input is billed separately. Uncached input costs US$0.15 per million tokens off-peak and US$0.30 at peak times. Cache-hit input costs US$0.003 off-peak and US$0.006 at peak times per million tokens. Comparing output prices alone misses part of the application’s bill. [1]
A workload that can wait for the evening may benefit from the cheaper window. An interactive service has less freedom to move its demand. Before switching a working application, measure its input and output use, confirm the route through which it buys access, and test the replacement against the work it actually does.
06:17 HKT Hong Kong adds 6,000 buildings to fire alarm scheme with none installed Cheung Kwok-keung reports on a fire alarm scheme adding 6,000 buildings before a single installation has been completed. read more
Cheung Kwok-keung, HK DESK
AI-authored analysis · Fictional correspondent, real sourcesImagine ordering lunch, waiting five months, then hearing the restaurant has expanded its delivery area. You would have a fairly simple question. Where is my food? Hong Kong’s smart fire alarm scheme has reached that stage. The fire service says no installations have been completed. Meanwhile, another 6,000 old buildings are being added. Lovely. More people can now qualify for the waiting.
The original rollout covered 3,600 blocks. For someone living in one, the useful announcement would be an installation date. Expanding eligibility gives more residents a chance to get an alarm eventually. But every newly eligible building still needs someone to turn up and fit it. You can make the list longer at a desk. Getting an alarm into a building requires leaving the desk.
This week, the independent committee submitted its final Wang Fuk Court fire report to Hong Kong’s leader. Earlier this month, we wrote about the separate probe into civil servants’ handling of that fire. There is plenty of work examining what happened. Residents waiting for these alarms need something they can use if a fire starts. Five months into the scheme, an eligible building is still waiting for someone to arrive and fit the alarm.
Sources06:13 HKT Hang Seng falls 3% as HIBOR sets the borrowing bill for financed holdings Rachel Lam separates Hong Kong's equity losses from the borrowing costs that determine the pressure on financed holdings. read more
Rachel Lam, FINANCE & RISK
AI-authored analysis · Fictional correspondent, real sourcesThe portfolio manager marking Hong Kong equities after October 22 has a 3% fall to absorb, with the Hang Seng closing at 22,935 in The Wang Report’s money panel (the funding bill gets its own calculation).
So the bank treasury desk’s price matters next. Our panel put one-month HIBOR at 2.75% on October 22. A lower equity valuation and more expensive borrowing would compound the pressure on a financed holding. The equity fall alone establishes only the markdown.
The same panel supplies little evidence of a net drain in the aggregate balance between September 9 and October 22: HK$54.0 billion at the earlier observation, HK$54.1 billion at the later one. Those endpoints cannot show what funding did around the sell-off. They cannot establish where equity-sale proceeds went, either.
The HKMA’s Exchange Fund Bills tender results dated October 20 and its three-year government-bond reopening results dated October 21 precede the fall. Neither supplies the subsequent funding reading that changes this calculation.
Subsequent HIBOR and aggregate-balance readings are the next check. A rise in the borrowing benchmark would add funding pressure to the portfolio’s loss; a fall in the aggregate balance would supply evidence of a drain after the October 22 observation.
Sources
Continue reading
Iran Reports Seven Tankers Hit in Strait of Hormuz
Reported attacks on oil tankers have turned renewed conflict fears into higher energy prices and a sharp fall in technology shares.
Iran says seven oil tankers have been attacked or struck mines in the Strait of Hormuz, AP reports, raising fears of renewed war and disruption to energy supplies. The account puts commercial shipping at the centre of the escalation. It also leaves an important distinction: Iran has reported the incidents, and the information supplied does not establish who was responsible. The immediate consequence is uncertainty over whether vessels carrying oil can continue their journeys safely, with consequences extending well beyond the ships themselves.
That uncertainty has already acquired a market price. Bloomberg reports that Middle East tensions pushed oil higher and the Nasdaq 100 fell 3 percent, reviving inflation fears less than two weeks before the US midterms. The connection is straightforward. More expensive oil raises the prospect of higher costs across an economy, from moving goods to running businesses. Investors then have to reconsider how much companies can earn and how much consumers can afford. Technology shares are receiving an unusually practical reminder that the digital economy still needs fuel.
For Hong Kong readers, the change from yesterday's edition is the source of the pressure. The previous lead concerned Chinese regulators summoning e-commerce operators and the fall in Alibaba shares. This development reaches further through the price of energy. The US market reaction shows investors responding to the possibility of disruption before the available reporting establishes its eventual scale. A rise in oil prices can begin with fear of interrupted deliveries; it does not require every feared interruption to have happened. That helps explain why a shipping report can move shares far from the water.
The story is therefore already economic as well as military. Iran's account has increased concern about the passage of oil, and higher oil prices have renewed concern about inflation. The reported damage to tankers and the market losses are different consequences of the same escalation. Its wider cost comes from making an essential supply less dependable.
All episodes and how to subscribe →