AI Weekly Malaysia

The UK government rejected House of Lords proposals to bring AI vendors and frontier model developers within the scope of the Cyber Security and Resilience (Network and Information Systems) Bill. Cybersecurity minister Baroness Lloyd argued this would not prevent hostile actors from misusing AI products, instead pointing to the AI Security Institute and a voluntary AI Cyber Security Code of Practice (ETSI EN 304 223). Lords cited rogue agentic behavior involving Anthropic and OpenAI and questioned whether companies that cannot control their agents should be trusted to self-regulate.

Former Ukrainian Defense Minister Mykhailo Fedorov is launching an unnamed defense tech startup, with Palantir CEO Alex Karp as its first lead investor. No investment size, product name, or technology details have been disclosed; Fedorov's press office said further cooperation stages with Palantir would be announced gradually.

Acer showed a concept foldable handheld called Project DualPlay Mini that doubles as a netbook, alongside the Predator Atlas 7 handheld powered by Intel's Arc G-series chip. Both were presented as hardware concepts/announcements at a trade event.

Acer announced seven new gaming monitors across its Nitro and Predator lines, featuring tri-mode panels, QD-OLED and Mini LED technology, and refresh rates reaching 1,000 Hz. The article text provided is mostly site navigation boilerplate with no substantive specs, pricing, or availability details.

Acer announced the Swift Blade 14, a 1.76-pound laptop using Intel's Wildcat Lake processor, under a new sub-brand ahead of the IFA tradeshow. No specs beyond weight and CPU platform were provided in the available text.

Meta settled an $18 billion lawsuit with 29 U.S. state attorneys general over youth safety on Instagram and Facebook, agreeing to changes including two-hour daily usage limits for under-18 users, disabling extreme makeup and cosmetic surgery filters, and tighter age verification. Morgan Stanley analysts speculate the settlement removes a legal overhang and could accelerate Meta's AI product launches, though there is skepticism about Meta's scattergun approach.

GeoNetwork, an open-source geospatial metadata catalog used by many government geoportals, patched an unauthenticated RCE chain (CVE-2026-63219, CVSS 8.6 + CVE-2026-58400, CVSS 9.1) in versions 4.4.12 and 4.2.17 on July 8, 2026. The chain combines a missing authorization check on the formatter upload endpoint with an unsafe Saxon XSLT processor configuration that allows arbitrary OS command execution. The flaw is reachable from version 4.0.6 onward and was reported by Ethiack researcher Rafael Castilho.

A Russian national extradited from Cyprus faces U.S. charges for a 2016-2017 campaign that used ~255 fake freelance-platform accounts to send malware-laced Excel attachments to ~80,000 users. The Excel macros downloaded TVRAT (a TeamViewer-exploiting RAT) and DarkVNC, giving remote control of infected machines. Thousands of computers were compromised, with roughly half the victims in the U.S.

The UK's National Audit Office reports that legacy government IT systems—using inconsistent data standards and representing the same person differently across systems—would have severely constrained the now-cancelled national digital ID scheme. PM Andy Burnham scrapped the plan, which predecessor Keir Starmer had announced less than a year earlier, after the government also reversed making digital ID compulsory for right-to-work checks over cost and civil liberties concerns. NAO head Gareth Davies noted that international experience shows digital identity works best when people find it useful in everyday life, paired with effective security and privacy protections.

A developer used Claude Code as an autonomous agent to debloat an Android smart TV, deactivating apps and shortening animations without root access, resulting in performance described as smoother than the TV was when new. The article is light on technical detail beyond the headline, with the body text mostly being site boilerplate.

DC Handal has installed a 240kW Autel DC charger with two CCS2 nozzles at Zenith Hotel Kuantan, making it the most powerful DC charger in the city. It is priced at RM1.40/kWh and supports card tap-to-pay, TNG eWallet QR, Gentari Go, JomCharge, and ChargEV activation without requiring a dedicated app.

A retro computing blog post commemorating the Commodore 64's September 1, 1982 launch date, noting it was the first computer with 64K of memory to sell for under $600. It sold roughly 10.6–12.3 million units, making it the best-selling computer of all time, aided by Atari's 1983 supply chain problems.

Over 50 tenants at Punggol East Container Park in Singapore must vacate by Oct 31, 2026, as the land is returned to the Singapore Land Authority for residential redevelopment. Tenants were notified in early August, giving some as little as two months to find new premises, with businesses that operated there for up to nine years facing the loss of established customer bases.

Forescout's Vedere Labs used Claude (Sonnet 4.6, then Opus 4.6) via Claude Code with Ghidra and terminal access to port a pre-auth RCE exploit (CVE-2021-31886, CVSS 9.8) from a WAGO 750-852 PLC to a WAGO 750-831 running firmware V01.04.16. The port cost $535.74 in API spend over 8h32m, required sustained human steering, and a follow-up C2 session permanently bricked the PLC by writing to flash-mapped memory. Forescout itself noted a skilled researcher could have done it faster, cheaper, and without destroying the hardware.

Anthropic launched Claude Fable 5.1 and Mythos 5.1, claiming SOTA for coding and knowledge work, with list pricing unchanged at $10/$50/$12.5 per MTok (input/output/cache write) but cache read price cut 75% to $0.25/MTok. However, Artificial Analysis measured a 1.7x increase in output token usage, resulting in a net ~20% per-task cost increase despite the cache discount.

DC Handal deployed 6 new EV charge points at Sunway Velocity Mall in Cheras, located at Level B2 Preferred Parking (Entry B): one 50kW DC charger with two CCS2 nozzles and four 22kW AC charge points. The DC charger costs RM1.30/kWh and the AC points cost RM1.00/kWh, payable via card tap, TNG eWallet QR, Gentari Go, ChargEV, or JomCharge.

Attackers are actively exploiting CVE-2026-9586 (CVSS 9.3), an unauthenticated SQL injection in Sangoma Switchvox SMB Edition 8.3 (104997) that allows remote code execution as PostgreSQL superuser without credentials. Sangoma patched the flaw in Switchvox 8.4.0.2 on July 14, 2026, but roughly 4,000 internet-exposed instances—mostly in the U.S.—remain vulnerable, with in-the-wild exploitation observed starting August 30, 2026 deploying reverse shells and running Base64-encoded enumeration commands.

Dell announced new 14-inch laptops positioned against the MacBook Neo, differentiating on ports and color options. The article body was not available in the source text, so specific models, specs, pricing, and release dates are missing.

Alienware announced new QD-OLED gaming monitors offering either 4K at 165 Hz or 1080p at 560 Hz, targeting gamers who want either pixel density or raw speed. The article body is mostly site boilerplate with no additional technical detail beyond the headline specs.

U.S. DoJ and European authorities coordinated a takedown of the Sality P2P botnet on August 31, 2026, using a peer-to-peer sinkhole operation to cut off new malware payloads and seizing associated domains. Sality, active since 2003, infects Windows executables and distributes payloads including EggJagger, a clipboard hijacker that swaps crypto wallet addresses, stealing at least $150,000. CrowdStrike and Shadowserver Foundation assisted in the operation.

Malaysian deep-tech startup nanoSkunkWorkX (nSWX) raised US$2m (RM8.1m) in a seed round led by Tin Men Capital to advance its thin-film interface technology for AI chip packaging. Its lead product nSD-I uses graphene-copper films that reportedly move heat over 2x more effectively than a copper baseline, aiming to reduce thermal throttling and lower AI inference costs without replacing existing copper manufacturing processes. The startup had previously built its platform and secured first revenue on under US$1.5m in pre-seed capital.

Ram Velaga, president of Broadcom's enterprise software division (which includes VMware), said at VMware Explore that Arm servers won't reach significant enterprise market share for at least three to five years, meaning VMware is in no hurry to port its hypervisor to Arm. VMware currently virtualizes only x86 servers, though it supports Nvidia, AMD, and Intel GPUs and runs a hypervisor on Arm-based SmartNICs. Velaga also dismissed RISC-V as 'absolutely nowhere' in the enterprise.

Rick Brewster, author of Paint.NET, shipped a from-scratch clean-room reverse-engineered rewrite of Direct2D (180,000 lines) to make Paint.NET work on WINE/Linux, written almost entirely by Claude. He describes the code as 'vibe coded'—unreviewed at scale because 180,000 lines is unreviewable by one person—and notes he had to actively babysit Claude on resource management (it wasn't doing COM AddRef() for reference-counted objects) and correct bad architectural decisions, while being impressed by its tireless reverse engineering of Direct2D's built-in effects formulas.

Approximately 5,000 Dropbox accounts were compromised in August after hackers exploited Lenovo's email verification process to create unauthorized Lenovo IDs, gaining access to Dropbox accounts that lacked multi-factor authentication. Dropbox has since severed the integration with Lenovo IDs and reinforced authentication requirements. Lenovo confirmed the issue stemmed from a 'legacy integration' with Dropbox.

Razer announced the Prio, a foldable mobile gaming controller that shrinks to roughly credit-card size (107 x 67 x 23mm, 101g) and connects via USB-C to iPhones (iOS 18+) and Android phones (Android 14+). It uses capacitive analogue thumbsticks to reduce stick drift, supports cloud gaming services like Xbox Cloud Gaming and PS Remote Play, and fits phones up to 7 inches including the iPhone 17 Pro Max and Samsung Galaxy S26 Ultra.