AI Weekly Malaysia

Novee Security demonstrated at Black Hat USA that a GitHub issue from an unprivileged account could execute code on CI runners behind Anthropic's, Google's, and OpenAI's own coding-agent repos. Gemini CLI's CVE-2026-12537 (CVSS 10.0) allows OS command injection via a crafted .gemini/.env file before the sandbox starts, fixed in Gemini CLI 0.39.1 and run-gemini-cli 0.1.22. Claude Code's CVE-2026-54316 used Hugging Face's public download counter as an API key exfiltration channel, fixed in 2.1.163 (all versions from 0.2.54 affected); OpenAI's Codex got no CVE, with OpenAI stating its sandbox behaved as documented.

Article URL: https://www.ign.com/articles/ramageddon-continues-another-year-as-2027-memory-capacity-is-reportedly-sold-out Comments URL: https://news.ycombinator.com/item?id=49207236 Points: 496 # Comments: 477

Oligo Security researchers Avi Lumelsky and Gal Elbaz linked TeamPCP to Redis server attacks dating back to 2020, with two H2 2025 campaigns: ShadowRay 2.0 (hijacking AI/Ray infrastructure into a botnet) and TA-NATALSTATUS (targeting exposed Redis servers for crypto miners). The group has since moved to supply chain attacks, poisoning open-source libraries via GitHub Actions and stolen tokens, after earlier exploiting React Server Components and Next.js flaws for credential theft.

A sysadmin at a Wall Street law firm was urgently summoned by a lawyer—who held both law and business degrees from an Ivy League university—because the lawyer didn't understand why letters in Outlook were 'slanted.' The sysadmin explained that the formatting was called italics and showed him the italics icon, while the lawyer's secretary tried to hide her laughter.

Huawei has been named event partner for the inaugural GSMA M360 ASEAN 2026, scheduled for September 9-10 at Grand Hyatt Kuala Lumpur. The event will bring together mobile operators, policymakers, and technology partners to discuss 5G evolution, AI integration into networks, and regional digital transformation, with MCMC present at the signing ceremony.

Chocolate Finance, a Singapore-based cash management platform founded by Walter de Ode (who previously founded Singlife), reports 150,000 users and S$1.5 billion in assets under management since launching in 2024. This is a sponsored article describing the platform's pitch: spare cash earning returns without fixed-deposit lock-ins or traditional savings account complexity.

U Mobile launched its Enterprise Innovation Platform (EIP) Hub, a sandbox facility built on its 5G-Advanced infrastructure where Malaysian enterprises can develop, test, and demonstrate 5G-A and AI solutions before scaling. The hub has 15 partners including AWS, Huawei Malaysia, Palo Alto Networks, Qualcomm, and Agibot, and is working with MRANTI and Cradle Fund to connect startups with funding pathways and testing environments.

GSMA's Mobile Economy Asia Pacific 2026 report projects mobile technologies and services will contribute US$1.4 trillion (RM5.7 trillion) to the Asia Pacific economy by 2030, up 40% from US$1 trillion today. The report frames the next growth phase around four priorities: AI adoption, declining digital trust, resilient infrastructure, and digital sovereignty, with M360 ASEAN 2026 scheduled for September in Kuala Lumpur to discuss these themes.

AMD acquired Taalas, a startup building custom ASICs designed around specific AI models rather than fitting models to generic hardware, signaling AMD's bet that inference-specialized silicon is the next battleground. Separately, Meta's Muse Spark 1.2 jumped into the Vals Index top 5 at $0.69/test (3x cheaper than Kimi, 10x+ cheaper than Opus) and became the first model above 60% on Finance Agent v2 at $0.77/test versus Opus 5's $5.12/test, while claiming gold-medal-level STEM Olympiad results with no tool use.

DC Handal has activated 4 DC fast-charging points (two Autel units, dual CCS2 each, up to 240kW) at C-Mart Kompleks Changlun, Kedah, priced at RM1.40/kWh. This is the only public DC charger in Changlun after the Starbucks 60kW unit closed, and it sits near the Bukit Kayu Hitam Thailand border crossing. Activation supports tap-to-pay credit/debit cards, TNG eWallet QR, and apps (Gentari Go, ChargEV, JomCharge).

China's Cyberspace Administration (CAC) has launched an unexplained security review of Palo Alto Networks products, echoing its 2023 probe of Micron that ended with a de facto ban on Micron datacenter products in China. Palo Alto says there is no current impact on its ability to support customers in the region, but domestic competitors like Huawei and H3C overlap significantly with its portfolio.

Cloudflare CFO Thomas Seifert says machine-generated internet traffic already surpassed human traffic in May 2026—earlier than Cloudflare's previous 2027 prediction—and projects non-human traffic could reach 1,000x human traffic within five years. Cloudflare posted $696M Q2 revenue (36% YoY growth) with losses tripling to $205.7M, while touting low capex of ~$430M against rivals' trillions in AI infrastructure spend.

Energizer Malaysia has introduced the Ultimate Child Shield, a new line of coin lithium batteries specifically engineered to prevent internal burns if accidentally swallowed. The new batteries are offered in sizes 2032, 2025, and 2016, which are the standard sizes used to power everyday household devices such as car key fobs, remote controls, AirTags, and […]

Honor Malaysia has announced the local availability of the Honor Watch 6. The new smartwatch focuses on ultra-long battery endurance and comprehensive sports tracking, operating without the need for third-party subscription applications. Honor Watch 6 Malaysia pricing and availability The Honor Watch 6 is available in two variants in Malaysia. The Shadow Black option comes […]

https://www.reuters.com/world/new-mexico-court-orders-meta-p...https://www.theguardian.com/technology/2026/aug/06/new-mexic...https://www.kob.com/new-mexico/nm-court-orders-meta-to-pay-5...https://www.bbc.com/news/articles/cd7lz3wr2rlohttps://www.wsj.com/tech/meta-ordered-to-pay-942-million-to-... Comments URL: https://news.ycombinator.com/item?id=49204352 Points: 788 # Comments: 421

Anthropic updated Claude Fable 5's biology safeguards, cutting biology-related false-positive fallbacks by roughly 85% across product surfaces. Everyday health and educational queries—lab result interpretation, symptom understanding, biology learning—should now stay on Fable 5 instead of dropping to a less capable model. Dual-use requests like virology, toxicology, and molecular design still fall back to Opus 5, so the model is not yet usable for professional biology research or drug development.

AI usage is evident but isn't yet a serious problem

The guardian of Nissan brands in Malaysia, Edaran Tan Chong Motor (ETCM), has recently provided two units of Nissan Kicks e-Power for evaluation by the Royal Malaysia Police (PDRM). They will be used to assess the subcompact hybrid SUV’s capability in terms of performance, practicality, and adaptability through real-world frontline operations. The Proof of Concept […]

Additional details about OpenAI's mysterious new AI device make it sound like a pricey smart speaker.

Additional details about OpenAI's mysterious new AI device make it sound like a pricey smart speaker.

Grindr says AI is boosting engineering productivity, supporting a new $350-per-month premium tier and driving stronger subscriber growth and retention.

CNBC’s Jim Cramer said earnings season reinforced five investing themes he thinks will produce the market's best buying opportunities.