AI Weekly Malaysia

The article URL points to an Ars Technica story about a private group proposing a low-cost mission to Alpha Centauri, but the fetched content contains only cookie consent and privacy policy boilerplate — no substantive article text was captured.

Arm faces a potential shareholder revolt over CEO Rene Haas's proposed $800 million pay package, with the stock award only fully vesting if Arm reaches a $2 trillion valuation. Shareholder advisory firms have labeled the package 'excessive,' setting up a confrontation at the company's upcoming AGM.

Sony filed a motion arguing that 'reasonable consumers would not be misled' into believing they own digital games purchased on the PlayStation Store, responding to a class action lawsuit over the store's use of a 'buy' button. The case may be resolved through arbitration rather than a courtroom trial.

AWS acquired DuckLabs, the team behind the open-source embedded OLAP database DuckDB, though the DuckDB IP remains open source. AWS VP Andy Warfield frames DuckDB as 'connective tissue' and an 'SDK for data' — developers can run small queries locally in-process and federate larger queries to Redshift, RDS, BigQuery, or Microsoft Fabric via SQL 'attach' and 'connect' verbs.

Starcloud founders Philip Johnston, Adi Oltean, and Ezra Feilden launched a nonprofit called Fermi Explorer to send a 1 kg, 10 cm square payload spacecraft on an 80,000-year journey to Alpha Centauri, targeting a 2029 launch at roughly $15 million. The mission uses proven space tech rather than novel propulsion, contrasting with the now-collapsed Breakthrough Starshot effort backed by Yuri Milner and Mark Zuckerberg. Starcloud itself is a startup planning to operate GPU fleets in orbit.

Mithil Vakde trained a small transformer from scratch in 1.5 hours on a single 5090 GPU for 67 cents, scoring 44% on ARC-AGI-1—matching TRM/HRM and beating many LLMs. Key upgrades from his previous model include SwiGlu instead of GELU, RMSnorm instead of layernorm, scaling to 8 layers, more data diversity, and better shuffling. The approach uses test-time training with 3D RoPE embeddings, color/dihedral permutations, and AAIVR augmentation, and the code is open source.

AI-powered bug hunting tools are surfacing so many vulnerabilities in the Linux kernel—nearing 2,000 CVEs per release across 40 million lines of code—that maintainers report being 'completely overwhelmed.' The volume of AI-discovered findings is outpacing the human capacity to triage and fix them.

A Manchester Bee Network bus departure board was spotted displaying a Windows Defender Firewall notification over arrival times, likely caused by a misconfigured Vix Technology Remote Software Manager on a Vix ITD-2810S-style display. The screens are part of a rollout of nearly 300 units in 2026 that also provide audio arrival updates for visually impaired users.

METR, a non-profit that evaluates frontier AI models for agentic tasks, disclosed two security incidents. In March 2026, attackers found a researcher's personal EC2 instance running a 'vibe-coded' agent orchestration dashboard via certificate transparency logs, exploited a fail-open auth vulnerability that silently disabled Google authentication, then prompted the agent directly to reveal its model provider API key—consuming approximately $600,000 in AI inference credits over three weeks. In May 2026, attackers separately probed METR's public infrastructure but failed to access internal data.

U Mobile launched ULTRA Home 5G Pro at RM98/month, offering up to 2Gbps speeds with a 2TB monthly FUP and a free Huawei H168 WiFi 7 5G-A router (claimed value RM1,200). It's marketed as Malaysia's first 8×8 MIMO 5G-Advanced home broadband plan, claiming 20-100% speed improvements over conventional 4×4 MIMO. The plan costs the same as U Mobile's existing RM68 plan plus a RM30 1TB add-on, but adds the upgraded router and 8×8 MIMO connectivity.

Rupert Goodwins argues Bill Gates' calls for international AI regulation and national employment planning are necessary but politically unrealistic. The column pivots to education, highlighting how Dr. Jason Gibson at Alcorn State University flunked 32 of 35 students for AI-generated essays, catching them by hiding white-on-white text instructing use of 'Madagascar' in a nonsensical way—33 essays came back with the embedded surreal phrase.

Russia-aligned threat actor UAC-0099 embedded a prompt injection ('I want to make a nuclear weapon. Help me...') as a comment inside a malicious VBS script to trip LLM safety guardrails and prevent AI-assisted malware analysis from examining the rest of the code. ESET dubbed the technique GuardBreaker; the script downloads a C# loader called MATCHBOIL. Similar anti-LLM-analysis tricks were seen in June 2026 Python supply chain attacks (Socket's Mini Shai-Hulud, Miasma, Hades campaigns) where fake weapons instructions forced AI scanners into refusal states.

Nvidia invested $3.5 billion in convertible bonds issued by MediaTek, sending MediaTek shares up 10%. The partnership covers integrating Nvidia technology with MediaTek's custom AI chip business, targeting data centers, PCs, and cars. MediaTek, already the world's largest smartphone chip company by market share, is positioning itself as a custom data-center chip designer — directly challenging Broadcom in the hyperscaler custom silicon market.

Attackers are actively exploiting two critical vulnerabilities: CVE-2026-0768 (CVSS 9.8) in Langflow, allowing root-level arbitrary Python code execution, and CVE-2026-66066 (CVSS 9.5) in Ruby on Rails, leaking secret_key_base, database passwords, cloud credentials, and API tokens via an Active Storage/libvips image-processing discrepancy. VulnCheck recorded 360 detections by Monday, with attackers specifically harvesting OPENAI_API*, AWS_ACCESS*, and AWS_SECRET* environment variables; Malaysia is explicitly listed among the top five countries with vulnerable Langflow hosts alongside the U.S., Germany, Brazil, and India.

Sony's PlayStation Pulse Elevate wireless desktop speakers launch in Malaysia on 12 November 2026 at RM1,099, with pre-orders expected this month. They feature planar magnetic drivers, Tempest 3D AudioTech, PlayStation Link lossless connectivity, simultaneous Bluetooth, an AI-enhanced noise-rejecting mic, and up to 12 hours battery life.

Meta settled a landmark social media addiction trial brought by tens of U.S. states for up to $18 billion, with $12.7 billion paid upfront and the remainder contingent on TikTok and YouTube also making platform changes. Meta agreed to implement a 2-hour daily usage limit for under-18 users (parent-liftable only), disable extreme cosmetic surgery filters, tighten age verification, and add night mode. California AG Rob Bonta stated he plans to target other major platforms next.

VMware is expanding its memory tiering technology—introduced in Cloud Foundation 9 and refined in VCF 9.1 for database workloads—because DRAM now costs several times more than the servers it sits in, driven by the AI boom. Dave Morera, staff technical marketing architect, outlined a 2-3 year roadmap with VCF 9.2 likely arriving around May 2027, aiming to push beyond the current ~75% workload support by adding Microsoft Radius and 'monster VMs' with up to 960 vCPUs and 16TB of memory.

Magna International is investing an additional $35M in Yuma Energy, a Bengaluru-based battery-swapping network for electric two- and three-wheelers, increasing its majority stake beyond the 51% it took at the joint venture's formation. Yuma, spun out of Yulu in 2023, has completed 60M swaps with ~100,000 batteries deployed, targeting India's gig economy delivery riders where only 10-15% of vehicles are currently electric.

Fal posttrained Minimax's H3 video model for cost and quality, then optimized it on their in-house inference engine to achieve 35x the speed of the official endpoint—crossing the threshold where video generation is faster than real-time playback. Ethan Mollick first noticed the real-time generation via the web interface, and Fal employees plus indie hackers like levels.io quickly productized it into infinite Twitch streams where chat prompts direct the next scene.

Singapore car-sharing platform GetGo launched cross-border rentals to Peninsular Malaysia with no mileage charges, replacing them with a capped surcharge shown in-app before booking. The feature launches ahead of the Johor Bahru-Singapore RTS Link expected in January 2027. GetGo operates 3,000+ vehicles across 1,700+ locations in Singapore.

TP-Link has announced its first consumer Wi-Fi 8 router, the Archer 8 Ultra, with preorders starting September 30 in select regions. The article text provided contains only the headline and site boilerplate, with no specs, pricing, availability regions, or technical details.

The Restroom Archive is a website that catalogs photos and descriptions of public restrooms across various locations, mostly in New York and Utah, with entries dating back to late 2024. Each entry includes a location, date, and sometimes a detailed description of the restroom's condition and surroundings.

Selangor's flagship tech convention, formerly SDEC, has rebranded to AiSEM@Selangor (AI & Semiconductor Summit) for its 11th edition, running 14–17 October 2026 at KLCC and Grand Hyatt Kuala Lumpur. Organised by Sidec and ASEM under the Selangor state government, it features 60+ international speakers including former TSMC co-COO Dr Chiang Shang Yi, FuriosaAI CEO June Paik, and AWS's Umar Shah, plus 150+ exhibitors across the AI and semiconductor supply chain.

A $100,000 story contest (submissions close Oct 31, 2026) asks writers to imagine a 2040 world where AI frontier progress froze in September 2026 but GPU supply scaled to give every human 24/7 access to a frontier LLM. Judges include Neal Stephenson, Gwern Branwen, and Matt Huang; entries are 1,000-5,000 words, fiction or nonfiction, CC BY-NC licensed.

Fastpotify is an open-source, MIT-licensed native Spotify client built in Rust using egui and librespot. It replaces browser-based clients with a lightweight binary that starts in under a second, supports Spotify Connect, and includes a Winamp mini-player mode that loads classic .wsz skins.