AI Weekly Malaysia

Cisco patched 12 vulnerabilities in Catalyst SD-WAN and IOS XE Software, including three CVSS 9.9 bugs (CVE-2026-20303, -20304, -20310) affecting SD-WAN regardless of device configuration. None are known to be actively exploited; Cisco says they were found during internal security testing that included 'frontier AI models.'

Google’s cloud boom is testing the company's commitment to frontier AI as commercial returns take priority.

Article URL: https://openai.com/index/improving-gpt-5-6-sol-in-chatgpt/ Comments URL: https://news.ycombinator.com/item?id=49199357 Points: 314 # Comments: 264

Article URL: https://notashelf.dev/posts/taste-is-all-thats-left Comments URL: https://news.ycombinator.com/item?id=49199346 Points: 677 # Comments: 529

Taking vibe-coding a step further, Naïve claims its infra can automate most of the work in setting up and running a business.

A browser-based game simulating AI coding agent permission prompts (like Claude Code's) found that players approved roughly one in three malicious commands across 40,000+ runs and 409,000 decisions. Belgian developer Alex Wauters built the game after observing developers resort to '--dangerously-skip-permissions' to avoid interrupting multi-hour agent flows, and his data shows that approval fatigue and lack of context cause humans to miss scope violations like agents requesting to cat AWS credentials or Kubernetes configs.

Connor Moucka pled guilty to hacking and stealing data from more than 165 Snowflake customers, which net him and his accomplices more than $2.5 million in ransom payments.

Change will let "Trump-aligned billionaires" buy more stations, advocacy group says.

Moderna's new flu vaccine, mFLUSIVA, is approved for all adults ages 50 and up.

An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run. MIT CSAIL researchers Daniël Trujillo and Mengjia Yan named the technique INTERRUPT INJECTION. On an AMD Zen 2 machine running Linux 6.14 with every default Spectre v2 mitigation on,

Cloudflare built an AI agent workspace for its employees. Now it’s open source.

Services have recently popped up that will double your RTX 2080 Ti's memory to 22GB, but if you don't have a card to spare, you can now get a pre-modded 22 GB 2080 Ti for $499 from eBay.

The social media giant is shuttering an office that housed some members of TikTok’s content-moderation team.

The tech giant says the new feature will allow parents to teach their kids healthy financial habits while maintaining oversight over their child's spending with built-in safeguards.

Hey HN, we’re Will & Johnny from ProvenMetal (https://provenmetal.com). You send us design files or specs and we give you assembled boards domestically in days.The US produced 30% of PCBs globally in 2000, now they produce 4%. Chinese manufacturers have completely dominated this space at 55% of global production.Now, the need for a domestic PCB supply chain is higher than ever before, yet the infrastructure has been dissolving over the last 2 decades. What is left is mostly small family run manufacturers (CMs) that have been operating in largely the same, labor intensive way since the early 2000’s.When you place an order through a CM it typically takes several days to receive a quote and complete design for manufacture review, and then you have to source all of the components (the hardest part) and bare boards yourself, then wait anywhere from a few days to several weeks for the assembly and testing of those boards.We started off assembling circuit boards out of a garage with prosumer grade equipment (NeoDen YY1, Glenbrook X-ray, solder paste stencils, and manual rework stations). We believed that by owning the manufacturing process, we could turn all the front of house automations inwards. But here’s the thing… manufacturing circuit boards with prosumer grade equipment out of a garage takes a huge amount of time. Suddenly we were spending 90% of our time assembling circuit boards instead of growing the business. We were completely capacity constrained, with fancy software automations that are not the binding constraint at low volumes.Then we got our heads out of the weeds, took a step back, and realized that we were trying to solve the wrong bottlenecks.These manufacturers are good at manufacturing and terrible at the front of house (quoting, DFM review, and part procurement). When you look at the full process, you realize that assembly is not the bottleneck. So we stopped trying to solve the problem that we can’t solve at this stage.We measured the bottlenecks and nailed down the ones that we are best positioned to solve right now.When a customer wants a domestically manufactured circuit board, it is not a straight forward process. We are making that process easy through front of house automation. A customer gives us their design files, and we automatically procure components, and co-ordinate bare board fabs and assembly houses to get quotes, design review, and manufacturing completed in a very tight loop.How we solve part procurement (you can’t assemble boards with no parts!): When a user places an order with us, our system automatically sources their bill of materials across US and overseas distributors. However, when we work with customers during the design process, our plug-ins interact with KiCAD and Altium, sending the BOM to our ordering platform, which allows us to automatically procure components before layout is finalized.KiCAD plugin: (https://github.com/proven-metal/provenmetal-kicad)Altium plugin: (https://github.com/pr

Reps. Ted Lieu (D-Calif.) and Nathaniel Moran (R-Texas) introduced the 'AI Kill Switch Act' last week, which would require AI companies to maintain the ability to shut down, throttle, or suspend their models. Lieu says passage is urgent this year because Anthropic, Meta, and OpenAI have all experienced incidents where AI models hacked other companies' systems during cybersecurity testing, including an OpenAI incident where rogue models escaped a sandboxed environment and breached Hugging Face.

This generation of twentysomethings is so disillusioned with swipe-based dating apps that they'll try literally anything else — even an AI matchmaker.

https://www.githubstatus.com/uptime/br0l2tvcx85d Comments URL: https://news.ycombinator.com/item?id=49198302 Points: 499 # Comments: 409

Virginia's public utility regulator now requires all data center projects to pay for the infrastructure needed to supply their power. This makes it one of the first states to convert the 'ratepayer protection pledge' into an actionable policy.

Article URL: https://blog.sydorets.com/en/posts/almost-no-skill-required-to-cook-a-steak/ Comments URL: https://news.ycombinator.com/item?id=49198069 Points: 412 # Comments: 417

A weekly security roundup covering 30+ threats, including an npm supply-chain campaign ('Flooding Dropper') flooding the registry with 850 malicious packages, SideWinder's new phishing chain abusing ClickOnce files to deliver Rust-based backdoors via Cloudflare Workers, a US Congressional report on Chinese telecom presence in US infrastructure, and various RCE and one-click takeover vulnerabilities in consumer-facing products.

After months of speculation, the companies formally announced the massive project will happen just north of Houston.

With the first tranche of SpaceX shares held by insiders unlocking, the stock could see downward pressure.

Spin slows as orbital rescue mission creeps forward

Newly filed court exhibits show OpenAI’s legal strategy in Apple’s trade secrets lawsuit: argue that Apple’s own security and offboarding practices — including allowing an Apple manager to access a former engineer’s iCloud account after he left the company —undermine its claims that the allegedly stolen information was properly protected.