AI Weekly Malaysia

Broader bounty rules added to a swelling volume of machine-assisted vulnerability reports

The Ministry of Investment, Trade, and Industry (MITI) has yet to receive any official information regarding BYD’s assembly plant in Tanjung Malim. This was revealed by its minister, Datuk Seri Johari Abdul Ghani, in a response to a question by Senator Tan Sri Dato’ Low Kian Chuan during a Dewan Negara session earlier today. According […]

Apple says its trade secrets investigation into OpenAI has widened. In a new court filing, Apple claims additional former staff may have retained or accessed confidential information.

Notably, the company saw its subscriber base swell by 9% in the second quarter despite raising prices in several regions this year.

“We do not have, nor want, any of their trade secrets,” the ChatGPT maker says.

The company says it is honoring its earlier promise to reverse tariff-driven price increases, becoming one of the first PC hardware vendors to publicly roll back pricing after a major court ruling.

The legislation lays the groundwork for a potential overhaul of India's zero-merchant-discount-rate regime, under which businesses have not paid fees to accept UPI payments since 2020.

A credential-stealing npm worm originating from keyv@6.0.0 spread to hundreds of packages across multiple npm namespaces on August 4, 2026, using preinstall scripts to harvest GitHub, npm, cloud, Vault, Kubernetes, and private-key material from developer machines and CI runners. The malicious payload also planted Claude Code and VS Code workspace hooks that execute when a user trusts the workspace, and included npm publishing machinery to self-propagate by republishing poisoned versions using stolen identities.

Article URL: https://phoboslab.org/log/2026/08/xibalba64-making-of Comments URL: https://news.ycombinator.com/item?id=49168622 Points: 263 # Comments: 77

Ultimately, three markers will indicate whether China’s domestic DUV program is a legitimate rival or yet more state-sanctioned hot air.

Cybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed around Adobe and Zoom software updates, business document reviews, and system maintenance utilities to stealthily deploy Remote Monitoring and Management (RMM) programs like ConnectWise ScreenConnect. The campaign has been codenamed SMOKE#SCREEN by Securonix Threat

Revenue is soaring, yet hyperscalers say they still cannot build capacity fast enough

The case for career emergence

On Tuesday, AI infrastructure company Runware announced the launch of its own modular data center called Sonic Inference Pod.

Cloudflare ran an automated AI agent triage pipeline on the Astro repository for several months, cutting open issues from over 200 to about 30 and expecting to reach zero. The pipeline reads bug reports, reproduces them in sandboxes, diagnoses root causes, and ships preview releases for verification—all using isolated AI subagents running inside GitHub Actions. The underlying engine became Flue, an open framework others can use to build similar automation.

wrangler dev now produces structured traces for every local request. Your coding agent can hit a single API to pinpoint exactly what failed and why — no deployment required.

Cloudflare Agents brings all of your deployed agent sessions into a single experience, surfacing key information and insights into how your agents perform at scale.

Cloudflare built an internal 'Codex'—a governed set of engineering standards written in RFC format with RFC 2119 SHOULD/MUST keywords—that both human engineers and AI agents retrieve at the point of work. Over four months, an AI code reviewer flagged ~250,000 standard violations and blocked 16,000 merges, while a spec reviewer agent evaluated ~600 technical designs before implementation began.

Learn how to build customizable, sandboxed CI/CD pipelines natively on Cloudflare using Workflows, Artifacts, and the CI SDK. We walk through replacing complex YAML configurations with TypeScript workflow steps and self-healing AI agents.

Cloudflare Wallets will provide AI agents with native payments and verifiable identity on the web. Using the x402 protocol, agents can autonomously purchase APIs and content within clear safety guardrails.

Cloudflare announced a suite of tools extending AI agents beyond code generation into broader SDLC phases, including @cloudflare/ci for self-healing CI/CD that can spawn agents for complex tasks, OpenTelemetry traces in local dev via Wrangler and the Cloudflare Vite plugin, and Cloudflare Agents with Agent Traces for observing and maintaining agents in production. The post argues that agents should own the full lifecycle—testing, deployment, observability, triage—not just implementation, and shares Cloudflare's internal experience enforcing engineering standards with AI across its repositories.

Here are Google’s latest AI updates from July 2026

Data center protesters are getting arrested for minor infractions, yet they continue pushing back against these projects. Aside from the arrests, there's also at least 12 instances (probably more) where the police were called to intervene between politicians and protesters.

Here are five key things investors need to know to start the trading day.