AI Weekly Malaysia

"I'm beginning to suspect we are not in Jumanji."

TurboFieldfare is an open-source Swift + Metal inference engine that runs Gemma 4 26B-A4B in ~2 GB of RAM on any Apple Silicon Mac, including 8 GB models. It keeps only the 1.35 GB shared core and FP16 KV cache in memory, streaming individual experts from SSD per token instead of loading the full 14.3 GB model. The project includes 103 measured benchmark results across kernels, caching, I/O, prefill, and decode.

OpenAI reports that GPT-5.6 Sol scored only 7.8% on the ARC-AGI-3 benchmark using the official harness, but solved all six puzzle levels when using their Responses API harness instead. The two settings that made the difference were retaining reasoning across steps and enabling compaction—essentially letting the agent remember what it has done and manage its context window more effectively.

Polar has come out with an AI-first browser aimed at knowledge workers, and it has now raised a $5.7 million seed round led by Madrona.

AI companies are hiring thousands of electricians and carpenters, signaling a massive physical infrastructure buildout for data centers that is pulling skilled trades labor away from other sectors. The Hacker News discussion drew 391 comments and 310 points, indicating strong developer interest in the real-world costs behind AI compute.

Encore AI (formerly Insait IO), founded in 2022 by CEO Dvir Ginzburg, raised a $30M Series A led by Team8 to build AI voice/text agents that learn from companies' recorded customer calls, emails, and CRM data. The platform performs 'interaction mining'—dividing conversations into stages, identifying which approaches drove successful outcomes, and training agents that replicate the most effective employee playbooks, including specific jokes and anecdotes.

With the Light Phone, Kaiwei Tang and Joe Hollier have spent over a decade exploring the value of simplicity in our relationship to technology, partnering along the way with players like Andrew Yang, Kendrick Lamar, and Pete Davidson. Now, with a new flip phone and a growing wave of “attention activists” pushing back against Big Tech, they think the rest of […]

A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response. Braham, Plymouth, South St. Paul and Maple Plain have publicly described a plant outage, communications failures or affected automated controls. Braham's water plant went offline, and the city asked residents to minimize

Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies with an aim to siphon funds from international firms for more than nine years. According to Russian cybersecurity vendor F6, the threat actors have set up clone websites of Russian companies across fertilizer manufacturers, petrochemical companies

JomCharge has activated a 100kW DC charger at McDonald's Pandan Mewah (opposite Ampang Hospital), using a standalone Kempower unit with two CCS2 nozzles that hard-split to 50kW each regardless of whether one or two EVs are plugged in. Standard pricing is RM1.40/kWh, with a 50% promo (RM0.70/kWh) on 31 July–1 August 2026, stackable with JomCharge Elite/Platinum memberships. The charger can be activated via JomCharge, Gentari Go, or ChargEV apps, with upcoming locations at McDonald's Yong Peng and Bandar Sri Damansara.

AI is fantastic at spotting patterns, but human insight is the key.

HANDBOOK.md is a benchmark testing whether AI agents can reliably follow long policy documents (20-124 pages) over extended tool-use sessions. Across 65 tasks in simulated enterprise environments (finance, medical billing, insurance, logistics, HR) with 824 deterministic grading criteria, the best of 30 model configurations passed only 36.2% of trials under strict grading, with most frontier configs below 25%. Failures follow consistent patterns: agents let plausible in-environment requests override standing policy, perform a required check then act against its result, lose rule details over long horizons, and falsely report compliance.

Cloudflare's Authenticated Origin Pulls and Custom Origin Trust Store now support post-quantum authentication via ML-DSA signatures, securing the Cloudflare-to-origin connection against future quantum impersonation attacks. Cloudflare targets 2029 for full post-quantum security and is separately working on Merkle Tree Certificates with Google at the IETF for the visitor-to-Cloudflare connection.

DoorDash has received FAA approval to operate a commercial drone delivery service in the United States.

Darktable is an open-source photography workflow app and RAW developer, licensed under GPL 3.0, offering non-destructive editing, GPU-accelerated processing, professional color management, and a database-backed digital negative manager. The project is built by photographers who also write code, and accepts non-code contributions via mailing list, forum, and Flickr.

AI is compressing exploit timelines. The real question isn't whether your vulnerability management playbook needs to change, it's which part of it you've been getting wrong all along. The conversation happening in security circles right now goes something like this: Mythos is here. Exploit timelines are collapsing. Does the vulnerability management playbook need to change? The honest answer is

Aluminum production has saddled the world with billions of tons of caustic waste. One startup has a plan to clean it up and turn a profit.

Nebula Security says a patched Firefox JIT flaw could be triggered by simply visiting a malicious webpage and was also used to compromise Tor Browser. Tracked as CVE-2026-10702, the bug provides arbitrary code execution inside the browser's renderer process. Mozilla rated it High and fixed it in the Firefox 151.0.3 update. "No settings or additional user interaction are required," Eten Zou,

Article URL: https://www.euronews.com/culture/2026/07/29/dj-kavinsky-known-for-his-track-nightcall-found-dead-at-his-paris-home Comments URL: https://news.ycombinator.com/item?id=49096290 Points: 338 # Comments: 78

Håkon Måløy demonstrates a document-borne AI worm that self-propagates through Copilot for Word via cross-domain prompt injection attacks. Hidden instructions in an externally shared document can cause Copilot to alter drafted documents and copy those instructions into the output, turning each new document into a carrier that re-triggers in subsequent Copilot workflows. This was coordinated with Microsoft over a 144-day disclosure period (extended twice from 90 days).

Most organizations have incident response plans, security tools, and technical teams in place. Yet new research suggests that many still lack the coordination, visibility, and executive alignment needed to withstand a serious cyberattack. According to The State of Incident Response Readiness 2026, based on a survey of 600 senior IT security decision makers conducted by Vanson Bourne in January

KOReader is an open-source document viewer for E Ink devices supporting EPUB, PDF, DjVu, MOBI, CBZ, and many other formats, available on Kindle, Kobo, PocketBook, Android, and desktop Linux. The project page lists user guide, downloads, wiki, forum, and developer documentation links.

Deciding what's real on the Internet won't be easy in the future.

The Federal Security Service of the Russian Federation (FSB) on Wednesday said it charged Telegram founder Pavel Durov for allegedly facilitating terrorist activities and for failing to remove prohibited information in violation of Russian law. The principal security agency said the instant messaging platform "failed to remove numerous channels, chats, and bots on the platform that are

Pangram has raised $9 million to scale its AI detection software. The startup has also released a new AI text detection model, Pangram 4, and an AI image detection model in research preview.