AI Weekly Malaysia

CAF Bank has suspended online banking for a week with no restoration date, leaving 14,000 UK charity customers unable to process payments including payroll. The bank detected attempted fraud and found a previously unknown vulnerability in the connection between its systems and third-party software, but has not disclosed technical details of the flaw or a fix timeline.

Tesla is reportedly considering spinning off, selling, or closing its entire China business to facilitate a potential merger with SpaceX, per the Wall Street Journal. Executives were apparently already prepared for a China split in case of a Taiwan invasion, since SpaceX's defense-contractor status requires strict national security compliance that a China-linked Tesla would complicate.

The headline promises practical advice on mitigating AI-driven PC hardware price inflation via Newegg combo deals, Amazon price tracking, and refurb outlets like Woot, but the extracted article text contains only site navigation and boilerplate — no substantive content.

The provided text contains only Ars Technica's cookie consent and privacy policy boilerplate, not the actual review content of the game 'Pathogenic.' No substantive information about the game, its mechanics, or its reception is present in the extracted text.

Cloudflare added a provisioning API for Media over QUIC (MoQ) that lets you create isolated relays with separate credentials for publishers and subscribers, upgrading last year's unauthenticated global test endpoint into something production-usable. Relays provision within seconds across Cloudflare's 330+ city network with no servers to deploy or load balance, support MoQ Transport draft-14 and draft-16, and are free during beta.

Google fixed 1,442 security flaws across three recent Chrome releases (versions 149, 150, and 151), exceeding the total from the prior 23 milestones combined. LLMs are accelerating vulnerability discovery to the point where bugs are being flagged faster than companies can patch them, prompting Google to pilot two security releases per week and explore automated CVE description generation and dynamic patching without restarts.

Lumentum CEO Michael Hurlston warned at the RAISE Summit in Paris that indium phosphide—the compound semiconductor used in every AI data center laser—is entering a supply squeeze worse than the DRAM/NAND shortages. Lumentum runs five indium phosphide fabs but is already shipping 30% below customer demand, as hyperscalers order lasers in the hundreds of millions versus telecom's historical hundreds. Nvidia responded in March by investing $2 billion each into Lumentum and Coherent, which together hold most global indium phosphide capacity.

Researchers demonstrated streaming QR codes at 60 FPS to achieve nearly 190 KB/s data transfer between phones, using only browser-based camera access with no app, networking, pairing, or extra permissions required. The Tom's Hardware article is mostly boilerplate with minimal additional detail beyond the headline claims.

Katalyst Space's LINK spacecraft, launched to rescue NASA's Swift observatory from orbital decay, has delayed its rendezvous to late August after spinning out of control during commissioning. Engineers reduced the spin from 9 to 4 degrees per second using thrusters after two of three reaction wheels failed, and are now developing a new attitude controller and testing plans in a simulator before attempting in-orbit fixes.

Tom's Hardware tested three Thunderbolt 5 docks under $400 from Keychron, Plugable, and UGREEN. Keychron and Plugable both offer dual HDMI, but UGREEN won the roundup because it includes an M.2 NVMe slot for internal storage expansion.

Amazon's AWS sales jumped 37% in the quarter (fastest growth since 2021), and the company raised its 2026 capex forecast to $220 billion, up $20 billion. Apple gave weak current-quarter guidance due to supply constraints despite a 22% iPhone sales jump, and Tim Cook held his last earnings call as CEO before John Ternus takes over. Microsoft added nearly $450 billion in market cap after a 15% single-day stock climb.

Valve is funding an effort to port the open-source Linux RADV Radeon Vulkan driver to Windows, and the cross-platform driver already runs Counter-Strike 2. This reverses the usual direction of Valve's Linux gaming investments (like Proton) by bringing a Linux-origin GPU driver back to Windows.

A Tom's Hardware piece reports that setting up OpenClaw for local AI on low-end hardware is more difficult than online guides suggest. The article body was not accessible beyond the title and site boilerplate, so specific setup pitfalls, hardware specs, or benchmarks could not be extracted.

Vodafone paid £4.3 billion ($5.78B) to buy out CK Hutchison's remaining 49% stake in VodafoneThree, gaining full ownership of the UK's largest mobile operator roughly a year after the CMA-approved merger. Vodafone says full control will accelerate its £11B ($14.7B) network investment plan and deliver £700M ($942M) in annual savings by FY2030, though the Three brand will remain alongside VOXI, SMARTY, and Talkmobile.

Sovol's M1D is the first open-source IDEX 3D printer with an integrated tool-changer, supporting 7 toolheads that swap in 5 seconds for zero-waste multi-color printing. It uses two fully independent nozzles, distinguishing it from typical multi-color setups that purge filament.

Ryan Williams, co-founder of real estate platform Cadre (sold to Yieldstreet in 2024), raised a $10M seed from First Round Capital, Khosla Ventures, Thrive Capital, and others for Ellis AI, which exited stealth Thursday. Ellis uses AI agents to consolidate fragmented private credit workflows—document management, spreadsheet reconciliation, portfolio monitoring, and month-end book closing—connecting to existing systems rather than replacing them, with humans kept in the loop for material decisions.

Researchers from Singapore's Nanyang Technological University disclosed 84 security vulnerabilities across 4G and 5G core network implementations (Open5GS, OpenAirInterface, free5GC, SD-Core, eUPF) in signaling protocols GTP-C and PFCP. The root cause is a shared pattern of implicit trust between core network functions, made worse by cloud-native deployments exposing previously internal interfaces. They used an LLM-assisted multi-agent system called iFinder to categorize known flaws and discover new ones.

Apple reported fiscal Q3 2026 revenue of $109.42B (up 16%) and EPS of $2.02 (up 29%), beating estimates, but shares fell ~6% after-hours due to memory shortage headwinds expected to worsen. Tariff refunds contributed ~11 cents to EPS; without them, the beat was only 2 cents. Outgoing CEO Tim Cook cited supply constraints and FX headwinds on the earnings call.

Article URL: https://hughhowey.com/the-end-of-an-era/ Comments URL: https://news.ycombinator.com/item?id=49121980 Points: 434 # Comments: 443

Testing shows single-DIMM DDR5 configurations perform better than expected in gaming, with AMD's 3D V-Cache chips losing less than 3% performance using one stick. A single DDR5 DIMM also outperforms dual-channel DDR4 RAM.

Tom's Hardware tested 20 modern Intel and AMD motherboards and found that only 6 made full contact between the built-in M.2 SSD heatsink and the SSD. Poor contact means the heatsink can actually trap heat and throttle SSD performance rather than cool it.

The PS5 emulator Kyty has reached a milestone where multiple 3D games are now playable at around 30 FPS, reportedly in record time compared to prior console emulation timelines. The article is mostly paywall/navigation boilerplate with little additional technical detail beyond the headline claims.

Early testing shows AMD's Radeon RX 9050, the cheapest 8GB RDNA 4 GPU, is roughly 30% slower than Nvidia's RTX 5050 in games. It handles 1080p gaming comfortably but doesn't impress overall.

Device code phishing—abusing the OAuth 2.0 device authorization grant to steal access tokens—has gone from niche red-team technique to industrial-scale threat in under six months. By April 2026, Microsoft reported 10-15 new campaigns daily, Barracuda counted 7 million attacks in four weeks, and Push Security tracks 25+ phishing kits. The attack defeats all MFA including passkeys because it targets the authorization layer, not authentication: victims enter a code on the legitimate Microsoft device login page and click 'allow,' handing over a token.

Palo Alto Networks' Unit 42 reports a Chinese-speaking threat actor used DeepSeek via the open-source Hermes Agent framework to autonomously attack 460+ targets after a single Telegram instruction, with no further operator input. The agent selected CVEs, downloaded exploits, and abandoned unproductive paths on its own, but only 3 targets were confirmed successfully exploited. The operation was exposed because Hermes Agent inadvertently started an HTTP server leaking API keys, exploit scripts, target lists, and session logs.