AI Weekly Malaysia

ThreatFabric has documented a new Android malware family called Manic, active since February 2026, that combines banking trojan and spyware capabilities. Its standout feature is a Wi-Fi mesh relay technique allowing infected offline devices to exfiltrate data through nearby compromised devices with internet access. It targets 169 package IDs including Ukrainian, Russian, and European banking, government, crypto, and messaging apps, distributed via phishing sites and dropper apps impersonating utilities.

SMIC posted its first $3B quarter with revenue up 36.1% YoY and net profit nearly tripling to $479.2M, running at 93.7% utilization. Co-CEO Zhao Haijun announced wafer price hikes for Q3, citing a gap between SMIC's prices and industry-leading foundry prices, as US export controls cut Chinese AI data center builders off from TSMC and Samsung at the leading edge.

Cycode researchers disclosed a 9.4 CVSS vulnerability chain in AIT-GUI (versions ≤2.5.1), the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit. The server binds to 0.0.0.0:8080 by default, discards its configured host, and exposes state-changing routes with no auth, no CSRF protection, and path traversal—letting any unauthenticated party issue spacecraft commands, run server-side scripts, or execute command sequences. Fixed in version 2.5.2.

Microsoft is investigating reports that Windows 11's August Patch Tuesday update (KB5121003, covering 421 CVEs including 236 for Windows) causes certain games—ARC Raiders, MARVEL Tōkon: Fighting Souls, and The Finals—to crash, freeze, or trigger PC restarts with EXCEPTION_ACCESS_VIOLATION errors. Users theorize tighter kernel handle validation may have exposed latent bugs in third-party drivers that Windows previously tolerated, though Microsoft has not confirmed this.

A Kickstarter campaign for a Blu-Ray drive combined with a 9-in-1 docking station has reached 160x its funding goal at the halfway point of the campaign, driven by demand for physical media nostalgia. The article text itself is almost entirely Tom's Hardware site navigation boilerplate with no additional product or campaign details beyond the headline.

G.Skill agreed to a $2.4M class-action settlement over misleading DDR4 and DDR5 speed marketing, with eligible buyers receiving $20–$25 each. The vendor will also add XMP and EXPO packaging warnings to clarify that advertised speeds require overclocking profiles, not default JEDEC operation.

Zimperium zLabs reports ToxicPanda 2.0 (aka TgToxic) has expanded from targeting 16 banking apps to 349 financial institutions across 16 countries, with 167 remote commands and PIN harvesting via fake overlays. The malware abuses Android accessibility services to enable Wireless Debugging through ADB for privilege escalation, overwrites lock screen PINs, and exempts itself from battery optimization to persist in the background.

Pine64 has halted all Linux hardware manufacturing — including SBCs, tablets, and phones — through at least mid-2027 due to memory component shortages. The freeze affects the entire open-source maker hardware lineup with no indicated workaround or alternative supplier.

Tom's Hardware highlights a deal on the Gigabyte Aorus Master 16 gaming laptop, now $3,599 (down $800), featuring an RTX 5090 GPU, 24-core Arrow Lake CPU, 32GB RAM, 2TB SSD, and an OLED display. The article is primarily a deal alert with minimal technical analysis.

Forrester research warns that business transformation, software development, and tech implementation are among the tech job categories likely to be hit hardest by AI, while enterprise software will be reshaped rather than displaced. Only three market categories — infrastructure; data and AI; and identity, access, and network security — are positioned for clear growth; all others will be forced to adapt. Application development tooling, low-code platforms, content management systems, and IT services (including Oracle, Salesforce, SAP, and Workday implementation) are described as directly in the path of genAI code development.

Article URL: https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html Comments URL: https://news.ycombinator.com/item?id=49372583 Points: 1012 # Comments: 328

A US federal judge struck down the ATF's 'ghost gun' rule covering 3D-printed firearm parts, ruling that the restrictions violate the Fifth Amendment and conflict with the historical tradition of DIY gunsmithing. The article text itself is mostly site navigation boilerplate with no further substantive detail.

Tan Chong Ekspres Auto Servis (TCEAS) launched a mini-program inside TNG eWallet, letting users book and pay for car servicing across 40+ centres nationwide. Launch Rahmah bundles start at RM109 (semi-synthetic) and RM129 (fully synthetic), covering engine oil, filter, inspection, and labour with a 6-month warranty.

A console modder fitted working Switch 2 Joy-Con internals into original Wii Remote shells, with motion-sensing controllers that snap magnetically onto a Switch 2. The article text itself is mostly site boilerplate with no additional technical detail beyond the headline.

NASA and Katalyst Space abandoned plans to grapple and reboost the Swift gamma-ray observatory into a higher orbit after Katalyst's LINK spacecraft lost two of three reaction wheels to a post-launch spin. Engineers used electric thrusters and a software update to regain control, but the diminished attitude control made the reboost unsafe. LINK will still attempt a rendezvous for data-gathering, but Swift is expected to re-enter Earth's atmosphere later this year.

Winnie Ong founded Singapore fashion brand Young Hungry Free in 2012 at age 19, funding it by asking for her S$1,400/month retail salary in advance. Over 14 years the side project grew into a recognized homegrown brand whose designs were eventually worn by Blackpink's Jisoo.

A viral video shows an Amazon Prime Air delivery drone dropping a customer's package directly into her swimming pool in Texas, surfacing the same week Amazon announced plans to expand Prime Air to 500 cities. The article text itself is mostly site boilerplate; the substantive detail is limited to the title.

Binance launched Agent OS, a platform letting AI agents analyze markets and execute trades on users' behalf via Binance's APIs, Wallet Agentic Hub, x402 payment facilitator, and Skill Hub, with new MCP support. It integrates with ChatGPT, Codex, Claude Code, and Cursor, but Binance places responsibility for agent oversight largely on users through configurable sub-accounts with withdrawals blocked by default.

SparkyLinux 8.4, a Debian 13 derivative, has restored 32-bit installation images roughly a year after version 8.0 dropped them. The 32-bit minimal GUI edition uses a command-line installer and offers desktop environments including the original CDE, running on kernel 6.12 with modest requirements (259 MB RAM, 6.9 GB disk in a VM).

Socket Threat Research identified 40 malicious Firefox extensions impersonating Web3 wallets like OKX, Rabby Wallet, and TronLink to steal recovery phrases, private keys, and clipboard data. The campaign, active since March 2026, used Supabase projects as remote switches and Cloudflare Workers for exfiltration, with some extensions initially published as innocuous sports-score utilities before being repurposed into wallet-stealing malware under the same Firefox ID.

Article URL: https://dontpastetheai.com/ Comments URL: https://news.ycombinator.com/item?id=49371857 Points: 1034 # Comments: 576

Volvo Car Malaysia has opened order books for the upgraded 2026 Volvo EX90, which switches from 400V to 800V architecture, boosting DC fast charging from 250 kW to 350 kW (10-80% in 22 minutes vs 30) and power to 680 hp. The refreshed model uses dual NVIDIA DRIVE AGX Orin SoCs for enhanced ADAS features, and VCM is offering existing owners a free one-time core computer hardware upgrade. Local pricing is unconfirmed; the current 400V model retails at RM442,888.

This is a sponsored advertisement for Unifi Mobile's UNI5G Postpaid plan at RM39/month, offering 500GB data, uncapped 5G/4G speeds, unlimited local calls, up to 50GB hotspot, and discounted streaming add-ons from RM8.40/month. It also includes a free RM30 Setel voucher for online subscriptions.

OpenAI launched 'AI Futures,' a blog for its new Strategic Futures team, which will explore how society should restructure to preserve individual rights and agency amid transformative AI. The inaugural post frames 'concentration of power' as the largest long-term AI risk, arguing that political and military power has historically depended on human labor and consent, and that transformative AI could disrupt this foundation.

An engineer at Softjourn asked an AI agent to recommend a package for a common task; the agent returned a plausible-sounding name that turned out to be a malware package recently registered by attackers exploiting AI-hallucinated package names—a technique now called 'slopsquatting.' The engineer caught it only because company policy required checking GitHub source code and download counts before installing anything an AI recommends.