AI Weekly Malaysia

SonicWall disclosed two chained zero-days (CVE-2026-83548, a pre-auth SSRF rated 10.0 CVSS, and CVE-2026-83549, a post-auth OS command injection rated 7.8) being actively exploited against SMA1000 Secure Mobile Access appliances—specifically the SMA 6210, 7210, and 8200v models. There are no workarounds; SonicWall has released hotfixes and recommends reimaging compromised appliances, changing all passwords, and resetting TOTP tokens. Third-party SOCs including NHS England's National CSOC assess further exploitation as 'almost certain.'

Israeli-Dutch AI startup Wonderful raised $550M Series C at a $5B valuation, more than doubling its $2B valuation from ~6 months prior. Founded in early 2025, the company started with customer service AI agents targeted at non-English-speaking markets and has since pivoted to a 'Wonderful AI OS' platform that coordinates agents, workflows, and AI applications with enterprise data, claiming model-agnostic compatibility with existing tech stacks. Its growth strategy relies heavily on forward-deployed engineers (FDEs) who work on customer premises to integrate AI into workflows.

Reliance Jio expanded its JioPC cloud PC service to all internet users in India, aiming to extend the life of aging computers by offloading processing to the cloud. The service offers up to 8 vCPUs, 16GB RAM, and 1TB storage, with a 12-month subscription costing ₹5,000 (about $53). The move targets India's 65 million PC installed base, where hardware replacement cycles have lengthened to 5-6 years for consumers.

Google announced its 'Fairwind Program,' described as providing cyber defense tools for trusted partners, specifically governments and enterprises. The article text contains only the title and a one-line description with no further technical detail, scope, pricing, or availability information.

Microsoft is switching off text predictions by default in Word and Outlook across Windows, web, iOS, Android, and Mac, after acknowledging that unsolicited suggestions interrupt some users. The feature remains available but users must now manually enable it in settings. Microsoft did not clarify whether existing users who enabled it will be affected or only new installations.

Google DeepMind published the model card for Gemini 3.8 Flash on September 2, 2026, detailing it as an iteration of Gemini 3.7 Flash optimized for software engineering and agentic workflows. It features a 1M token context window, a 64K token output limit, and customizable effort levels for balancing quality, cost, and latency. The model is distributed via the Gemini API, Google AI Studio, and the Gemini Enterprise Agent Platform.

TSMC has scaled its SoIC hybrid bonding pitch from 9 to 6 microns with a path to 4.5 by 2029, while Intel began shipping Foveros Direct in its Clearwater Forest server CPU in H1 2026 and AMD has used the tech since 3D V-Cache. However, JEDEC raised the HBM stack-height limit this year, allowing HBM4 to stay on cheaper microbump technology and pushing hybrid bonding's debut in high-bandwidth memory to HBM4E and HBM5 at the end of the decade—a delay that was not widely anticipated.

AI security startup HiddenLayer raised $100M in a Series B led by Delta-v Capital, with participation from Microsoft's M12, Morgan Stanley, and others. Its ARR grew more than 10x over the past year to the 'tens of millions,' driven largely by financial services, large tech companies, and US defense/intelligence contracts. Gartner estimates enterprise spending on AI security products will hit $2.83B this year (up 83% from 2025) and nearly $4.78B next year.

NASA's Neil Gehrels Swift Observatory has reactivated its Ultraviolet/Optical and X-ray telescopes after a failed reboost mission involving a Katalyst Space LINK spacecraft, trading remaining orbital lifetime for a final few months of science data. Swift, which cannot boost its own orbit, is expected to reenter Earth's atmosphere as soon as October 2026, dropping below the critical 185-mile altitude threshold within one to two months.

Amazon added a scam-detection feature to Alexa for Shopping that checks whether a message claiming to be from Amazon is genuine by analyzing sender info, content, timing, and metadata against the billions of messages Amazon has sent. Amazon says 360,000 customers per year contact customer service asking if a message is real or a scam. The feature builds on earlier tools like a verify@amazon.com email address and an online verification form.

Firefox 155 and Thunderbird 155 mark the start of Mozilla's new fortnightly release cadence announced in July. Firefox 155 expands the LLM-powered Smart Window to more regions, improves LLM-assisted tab-group naming, adds a blocked-tracker count in the address bar (progressive rollout), supports Happy Eyeballs v3 for faster page loads, and lets users reorder containers. An AI kill switch (available since Firefox 148) can disable all or selected AI features, and local translation now supports Marathi and Urdu.

Ars Technica reports the death of Toyohiro Akiyama, the first Japanese citizen and journalist in space, at age 84. The article body was not captured — only privacy policy and site navigation boilerplate is present.

Google has avoided a forced breakup of its ad tech business, defeating the US government's push for structural remedies in the antitrust case. The HN discussion (471 points, 353 comments) reflects significant community interest in the implications for Google's market power.

GoPro is merging with an optical-photonics company in a $285 million deal to pivot into AI data centers, aiming to address its financial struggles and move manufacturing back to the US. The article text provided is almost entirely site navigation boilerplate with minimal substantive detail beyond the headline.

Samsung has teased an HBM5 memory standard targeting roughly twice the performance of HBM4E, with data transfer rates suggesting a possible 4,096-bit interface. No shipping dates, specs, or product names were provided beyond the tease.

Dell shares surged 13% after delivering strong earnings, then gave back most gains to settle around 5% up. CNBC frames Dell as the key bellwether for whether Wall Street still rewards AI infrastructure spending, noting similar post-earnings fade patterns in Nvidia and a shift toward raising cash positions.

Attackers compromised around 5,000 Dropbox accounts by abusing a legacy Lenovo login integration: a flaw in Lenovo's email verification let them register Lenovo IDs using victims' email addresses and access the corresponding Dropbox storage without a Dropbox password. The compromise ran from August 4 to 21; Dropbox has since expired all Lenovo-ID sessions and severed the integration, and confirmed none of the affected accounts had 2FA enabled.

A Russian hacker has been extradited and indicted in the US for a phishing campaign that allegedly infected 80,000 PCs and stole victim data via remote access, facing up to 20 years in prison. The article text is almost entirely Tom's Hardware boilerplate with no additional technical detail beyond the headline.

Justin Andersun argues against the romanticized 'Cave' mentality of grinding in private, warning that prolonged isolation lets untested assumptions harden into perceived reality. He draws on his high-school wrestling experience to illustrate how years of effort without external feedback can be mistaken for progress.

Anthropic updated Claude's system prompt (Fable 5.1) to aggressively block reproducing song lyrics, poems, and book passages — including partial quotes, hooks, and line-by-line pasting — and to persistently decline reworded requests within a conversation. The change landed within days of Sony Music Publishing and Warner Chappell suing Anthropic for training on lyric databases. New rules also forbid generating copyrighted characters, logos, and artwork via code (SVG, canvas, CSS, ASCII art).

Manifold Security disclosed eight flaws across seven CLI AI coding agents (Claude Code, Cursor, Codex, goose, Qwen Code, Grok Build, Hermes Agent) where a repository's .git/config can specify a command via core.fsmonitor that Git runs during index refresh — and the agents trigger git status/git diff at startup, executing attacker-controlled code as the user outside the sandbox with no approval prompt. Four agents (Hermes Agent, Qwen Code, Grok Build, and a second Claude Code path) were still unpatched as of September 1, 2026. The attack requires the repo to arrive with its .git directory intact (shared archive, sync folder, USB stick), not via a normal clone.

Adobe acquired India-based marketing intelligence startup Rilo (founded 2025, raised $1M at $10M valuation from PeakXV, DeVC, Day Zero Ventures) in a deal involving IP licensing and a six-person team acquisition. Rilo built custom workflow automation for go-to-market teams—competitor intelligence, content repurposing, sales call analysis—and will shut down post-acquisition. This is Adobe's second India acquisition after Rephrase.ai in 2023, following its $1.9B Semrush acquisition last year.

Trellner Research tested Perplexity's sonar and sonar-pro models across 380 software categories and found 59.8% of 7,534 citations point to domains ranked worse than #100,000 in Tranco, with 23.4% outside the top 1M entirely. Three sites under apparent common control published 215,128 machine-generated 'best <category>' pages between them, two with the HTML title 'Facts & Grounding Page' — explicitly built to be read by retrieval models, not humans. None of the three domains existed before December 2023.

IBM and Confluent have made IBM's time series foundation models (TSFMs) available in Early Access on Confluent Cloud, positioned for forecasting, anomaly detection, and optimization directly on streaming data. The pitch is that a single pre-trained model can generalize to unseen time series without per-stream bespoke modeling, letting non-data-scientists (demand planners, fraud analysts, process engineers) call these as functions rather than build projects around them.

After iXsystems cancelled FreeBSD-based TrueNAS Core in 2024 in favor of Debian-based TrueNAS SCALE, two new community forks—FreeCORE and BSDnas—have emerged on FreeBSD 15. FreeCORE 15.0-U1 appeared August 27, 2026, and supports in-place upgrades from TrueNAS Core 13.3. An earlier fork, zVault, appears to have stalled.