AI Weekly Malaysia

The Hacker News piece frames three questions boards ask security leaders: how secure is the organisation overall, what is the actual financial exposure, and is the posture better than last quarter. It argues traditional activity metrics (vulnerabilities found, patches applied, alerts closed, phishing tests passed) can't answer these, because exposure data is split across an identity provider, CSPM/CNAPP, EDR, SIEM, vulnerability scanner and SaaS apps that don't share context. It walks through one concrete attack path: a contractor account that still holds a group membership from a finished project (rated low risk by the identity tool) grants access to a SaaS app whose OAuth integration reaches into the cloud environment, which the SaaS security tool reads as a normal integration.

Toshiba TV Malaysia is running its Dazzling Lights Season Promotion from 1 October to 31 December 2026, giving up to RM800 in TNG eWallet credit with selected TVs: the Z570S Gaming TV (RM3,999–RM8,999), Z670S Mini LED 4K (RM3,999–RM19,999), and Z770R Mini LED 4K (RM7,299–RM12,999). The credit scales by model and size — the top RM800 goes with the 100" Z670S at RM19,999. Redemption runs until 15 January 2027 via QR code plus online form (model, serial number, proof of purchase, warranty registration), rewards stack up to 4 products on one invoice, and only the first Google Form submission per invoice number counts. Credit lands within 6 weeks after the redemption period ends.

Tom's Hardware reports that Micro Center is requiring photo ID and a signed declaration from customers purchasing an RTX 5090. The declaration reportedly has the buyer disclose where the GPU will be installed and pledge that the card will remain in the United States. The article body supplied here is almost entirely site navigation and subscription boilerplate, so no additional specifics — store locations, effective dates, pricing, or how the pledge is enforced — are available.

Article URL: https://bsky.app/profile/theplanetaryguy.com/post/3mwucf5ert22f Comments URL: https://news.ycombinator.com/item?id=49932147

A Draup analysis provided exclusively to CNBC found job postings mentioning 'agent orchestration' rose 1,721% this year, making it one of the fastest-growing technical skills in finance. AI-related roles at banks including JPMorgan Chase, Citigroup and Capital One rose 49% versus 2025 to 139,819 listings, with hiring shifting from model builders toward 'forward deployed engineers' who embed AI into trading desks, compliance and back-office operations. Draup puts median base pay for generative AI managers at about $190,000; the excerpt is truncated mid-sentence, so the full breakdown of which skills sit inside the agents cluster is not visible here.

Tom's Hardware reports Raspberry Pi prices are rising by up to 23%, the third price hike of the year, attributed to escalating LPDDR4 and LPDDR5 memory costs and broader component shortages. The published excerpt contains almost no product-level detail — no per-model pricing, no effective date, and no confirmation of which SKUs are affected beyond the headline figure.

The fetched page contains only Ars Technica's cookie-consent and privacy-center boilerplate — no article body about TCL, Samsung, or Mini LED terminology. Nothing about the dispute, product names, panel specs, pricing, or dates is actually present in the text.

PewDiePie has unveiled an 'uncensored' AI model called Ajax that is built to run on home PCs, according to Tom's Hardware. In the same report, the creator says OpenAI banned him twice over the model distillation used to build the product. The article text available is almost entirely Tom's Hardware site navigation, so there are no details on parameter count, benchmarks, licence, hardware requirements, or any response from OpenAI.

California's bill requiring 3D printers to block firearm printing has become law, per Tom's Hardware. Existing machines are exempt, and the mandate on manufacturers only kicks in once an industry standard — described as an as-yet unwritten ASTM standard — is published. The item's body text was not available, so only the headline and excerpt could be used.

Singapore-based ride-hailing firm Ryde, listed on the NYSE, is facing a shareholder petition and a US class action. Octava Fund filed a Cayman Islands petition on Jul 3 seeking a buyout of Ryde's 6.9 million shares or a wind-up over alleged improper governance and breach of duty, while a Sept 10 class action in the Southern District of New York alleges a pump-and-dump scheme. Ryde said on Sept 18 that the proceedings are at an early stage, no findings have been made, no liquidator has been appointed, directors remain in control, and it intends to defend the class action.

Google announced that Android 17, when Advanced Protection is enabled, will restrict AccessibilityService access exclusively to verified apps categorized as Accessibility Tools. The AccessibilityService API runs in the background, intercepts UI events and acts on other apps; Google says banking trojans and spyware have abused it to read sensitive data, draw fake login screens over legitimate apps, log keystrokes and initiate fraudulent transfers without root. The post also lists earlier countermeasures: blocking sideloaded apps from enabling accessibility services, in-call protections against disabling Play Protect or granting accessibility permissions, and the accessibilityDataSensitive flag developers can set on sensitive views or composables.

Asus Malaysia priced the ROG Xbox Ally X20 Bundle at RM10,999 with only 30 units for the Malaysian market, with pre-orders open online from 8pm on 2 October until 15 October 2026 while stocks last. The bundle pairs the 20th-anniversary translucent black-and-gold handheld (7.4-inch 1080p 120Hz OLED, Ryzen AI Z2 Extreme, 24GB LPDDR5X-8000, 1TB SSD, USB4/Thunderbolt 4, WiFi 6E, microSD Express) with ROG Xreal R1 Edition 20 AR glasses, a dbrand Killswitch, a 68W adapter and a Pelican case. Buyers also get an ROG Ally Limited Edition Loot Box and 20% off selected ROG gear via purchase-with-purchase; standalone handheld pricing has not been announced.

Acer launched the Predator Orion 7000 in Malaysia at RM18,999, alongside the opening of Malaysia's first Predator store at Low Yat Plaza. The pre-built tower pairs an Intel Core Ultra 9 285K (up to 24 cores, 5.5GHz turbo) with an NVIDIA GeForce RTX 5080, 32GB DDR5, a 1TB SSD and Windows 11, and is upgradable to an RTX 5090, 128GB DDR5, two M.2 slots up to 6TB and 3.5-inch drives up to 4TB. It includes WiFi 7, 2.5Gbps Ethernet, Thunderbolt 4, a three-year on-site warranty, and a free Predator Cestus 335 mouse (worth RM299) until 14 October while stocks last.

Earendil's Pi 1.0 and Pi Durable both landed on the Hacker News front page. Pi 1.0 ships Codemode (native MCP plus Jev and image model support), deferred tool loading, cache warming for Anthropic models, mid-conversation system messages that change prompts and tools mid-transcript, and full-screen TUI by default. Pi Durable is a TypeScript port that checkpoints every agent step so runs auto-resume after a crash, runs anywhere with a JS runtime (Node, Bun, Cloudflare) with Memory, SQLite, or JSONL storage, supports parallel branching conversations, installable Extensions with rollback-able durable tasks, background compaction, state documents shared alongside transcripts for multi-user steering, and hot-swapping tool code while the agent is running.

1337 Ventures has published its 2026 Request for Startups, listing seven problem areas it wants to back at pre-seed: Vertical AI & Agentic Workflows; Fintech, Trust & Compliance; Industrial AI & Smart Manufacturing; HealthTech & Care Infrastructure; Food, Agriculture & Supply Chains; Climate Intelligence & Resource Efficiency; and Semiconductor & HardTech Enablement. The firm says it is targeting companies where roughly US$37,000–US$122,000 (RM150,000–RM500,000) of early capital is enough to build an MVP, land first design partners, run pilots, or generate evidence for a seed round. Founding partner and CEO Bikesh Lakhmichand frames the themes around a specific test for founders: what you understand about an industry deeply enough that a general AI platform cannot easily replace you, since AI is now a horizontal layer rather than its own vertical.

Bitget CEO Gracy Chen told CNBC that only about $1.1 million of the roughly $388 million stolen in a cyberattack last week has been frozen, and that she is 'not expecting to recover a lot of funds' based on recovery rates from previous exchange hacks. Bitget has refilled its Protection Fund to $300 million from its own reserves to cover losses, and Chen declined to name the third-party vendors that were breached, citing security risk.

RhinoShield and Sent Into Space dropped an iPhone 17 Pro in a RhinoShield case from 100,416 feet (30,607 metres) after lifting it by balloon, then recovered it undamaged in Kiruna, Sweden. The stunt earned a Guinness World Records title for the highest drop of a mobile phone in a phone case (natural landforms). For context, standard lab drop tests are around 1.2 metres and RhinoShield’s own office tests are about 23 metres.

CISA added CVE-2026-104286 (CVSS 9.8), a path-traversal (CWE-22) plus NULL-byte (CWE-158) flaw in Fortinet FortiMail, to its Known Exploited Vulnerabilities catalog on October 1, 2026 after confirming active exploitation. Crafted HTTP/HTTPS requests let unauthenticated attackers write arbitrary files on the underlying system; affected branches are 8.0.0-8.0.1, 7.6.0-7.6.6, 7.4.0-7.4.8, and 7.2.0-7.2.9, with fixes not yet shipped for several of them. Fortinet's listed indicators of compromise include two IPs (79.141.169.187, 45.129.0.192) and newly added files such as /data/etc/ld.so.preload and /data/bin/webconsole.

EV Connection (JomCharge) deployed 1.4MW of DC charging capacity at Sepang International Circuit for the F1 weekend (2–4 October 2026), made up of three existing JomChargeX fixed chargers (360kW across six nozzles) plus seven Kelle Energy mobile chargers adding 1,050kW across seven nozzles — 13 DC nozzles in total, reserved exclusively for the event's private fleet and not open to the public. The mobile units are third-generation EPLVS chargers delivering up to 150kW each with an integrated ~200kWh battery storage system, motorised wheels and remote-control repositioning, and they recharge off the fixed JomChargeX units when depleted. This follows a February partnership between Kelle Energy and JomCharge to deploy 100 mobile EV chargers in Malaysia, where the earlier unit shown was a 60kW charger with a 184kWh battery.

A review of the Shimano Bicycle Museum in Japan's Kansai region, praising its focus on bicycles rather than Shimano's own corporate history. The museum is a glass-and-steel building with bilingual signage, a darkened chronological hall running from hobby horses through pedals, chains and tires, and a bright white room where unrestored machines sit accessible rather than behind glass — including Freddy Maerten's steel Flandria with Ishiwata tubing decal and a Shimano Crane rear mech, an early Breezer mountain bike, Paralympic bikes with custom modifications, a studded-tire Swedish postal Crescent, a dust-caked Cannondale from a four-year 55,000km round-the-world ride, and a Merida from the 2021 Olympics road race. It drew 235 points and 45 comments on Hacker News.

INTERPOL global CISO Bjorn R. Watne told CNBC at Tech Week Singapore that AI is an "evolution and not a revolution" in cybercrime — it accelerates existing scams and fraud rather than inventing new categories, letting operators target many victims at once while better translation and synthetic digital identities make fraudulent interactions harder to tell apart from real ones. Watne said agentic AI adds new risk because those systems gain greater access and the ability to act on a user's behalf, and advised companies to first identify their "crown jewels" — the assets most critical to operations — and tailor defenses to who would want to steal them. The piece carries no incident data, statistics, or named tooling.

IGEM 2026 and KLSS 2026 run 7–9 October 2026 in Kuala Lumpur, pairing a greentech exhibition (renewable energy, green mobility, circular economy, hydrogen, carbon management, sustainable finance, smart city) with a policy-and-financing summit. The promo cites that Asia holds 99 of the world's 100 most environmentally at-risk cities, and flags a Business Matching Hub plus dedicated MIDA and MATRADE matching sessions for investment and export leads. The excerpt is an event preview with no product, pricing, technical, or funding details beyond those sessions.

ServiceNow CoreAI published a Hugging Face article describing AutoSynthData, a pipeline that uses a target model's failures plus a stronger teacher model's successes to pick what the model should learn next, then generates and validates new agentic tasks, shifting the curriculum toward whatever the model still finds hard. Tasks are formalised as a tuple of (system specification, user prompt, verifier), with the system spec covering instructions, environment policies and initialisation such as a seeded database state or knowledge articles, and generated tasks required to satisfy properties starting with feasibility. The pipeline is illustrated on the released EnterpriseOps Gym dataset (cited as Malay et al., 2026). The article text supplied is truncated mid-sentence in the feasibility section, so the remaining task properties and any results or benchmarks are not available here.

Acer Malaysia opened the country's first Predator concept store on the ground floor of Low Yat Plaza, alongside the launch of its flagship Predator Orion 7000 gaming desktop. Opening-day promos cut prices across laptops, desktops, monitors and accessories — for example the Predator X27UF5 26.5" 1440p QD-OLED 500Hz monitor at RM2,399 (SRP RM2,899), the Nitro N50 (Intel Core i5, RTX 3050) at RM3,399 (SRP RM4,699) with a free upgrade to 16GB RAM, and Predator Helios Neo 16S AI laptops ranging RM9,399–RM10,399 with RTX 5060/5070 GPUs.

DeepSeek has put Harness into worldwide public preview as an open-source desktop app for macOS and Windows, plus a web UI you can launch from code. It is built on Cordis's "everything is a plugin" architecture, with a Creator mode that writes and installs plugins from a chat prompt — the page's own demo builds a floating Pomodoro timer in 5m 24s (package.json +35 lines, client.js +638 lines, verified against live plugin state). Listed capabilities include coding, research, background tasks, and experimental agent teams, scheduled tasks, voice input, terminal, agent loop, and subagents.