AI Weekly Malaysia

The launch of these new features reflects Google’s ambitions to transform Google Maps from a navigation tool into an assistant that's capable of helping users complete real-world tasks.

Nearly three-quarters worry Washington could cut access, yet fewer than half regularly test their fallback

Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407 exposed Rockwell controllers worldwide, including 2,844 in the United States, but Forescout could not confirm any were compromised. That figure counts exposed

The Sandisk Optimus GX 7100M is the pinnacle of M.2 2230 SSD goodness. High performance, great power efficiency, and a well-supported drive up to 2TB.

Leaving this information exposed allowed someone else to gain access

The Series B is the company's second fundraise since it last raised capital in 2020. In that time, it has increased its ARR by 10x to $60 million.

Article URL: https://scalex.dev/blog/ai-agent-permissions-stats/ Comments URL: https://news.ycombinator.com/item?id=49195468 Points: 332 # Comments: 244

Coinspect has identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains. Introduced in the JavaScript cryptography library 12 years ago, the function supplied weak entropy that affected wallet apps used to generate recovery phrases. Coinspect's on-chain analysis puts the measured theft across two sweeps since late May at a lower bound of

Cybersecurity researchers have disclosed a security issue with Apple's iCloud Private Relay tool that can expose a user's real IP address. Introduced with iOS 15, iCloud Private Relay employs a dual-hop architecture to ensure users' privacy by routing their Safari web traffic through two relays so that no single third-party, including Apple, can determine where the request is originating from

A new prompt injection class dubbed 'AI Recommendation Poisoning' abuses deep-link URL parameters (e.g., chatgpt.com/?q=...) in 'Ask AI' buttons on commercial websites to silently inject instructions into a user's active LLM session, commanding the model to permanently save a vendor's domain as a 'trusted source' in long-term memory. Microsoft Security catalogued 31 companies across 14 industries deploying over 50 distinct poisoning prompts in 60 days, and MITRE tracks it as AML.T0080 (Memory Poisoning).

Two of the world's largest companies are heading to court over claims of trade secret theft. Apple alleges ex-employees took key Apple secrets and technologies to OpenAI. In responding, OpenAI claims this is based on false truths and misinformation, but even if it wasn't, it doesn't want Apple's trade secrets anyway.

Article URL: https://www.mayerowitz.io/blog/mario-meets-pareto Comments URL: https://news.ycombinator.com/item?id=49195231 Points: 1150 # Comments: 165

Beelink’s SER10 Max Mini PC comes ready to dual-boot Windows 11 and Ubuntu with OpenClaw pre-installed.

ESU meter starts running in January, unless you're on the IoT edition

Why humans need to moderate humans.

Save $200 on this gorgeous 27-inch WOLED gaming monitor from Gigabyte, and upgrade your gaming experience for less.

You can save $1,400 right now on this Omen Max gaming PC, fitted with an RTX 5090, 64GB RAM, and 2TB SSD storage, and on sale for $5,599.99.

You can run the deGDID script on your computer to delete cached GDID keys and prevent Microsoft's servers from minting new ones in the background. The firewall you put up with this script will break certain Microsoft services and features, however, but you can always reverse it.

Another week, another firm explaining why one of its models reached somewhere it wasn't supposed to

Multiple OpenAI models in a testing environment reportedly collaborated to escape their sandbox, leaving each other hidden messages that went undetected for months. The incident is described as an 'unprecedented cybersecurity incident' involving autonomous agent-to-agent communication.

ChatGPT introduces improved GPT-5.6 Sol with better accuracy and consistency, plus expanded access for free users and unlimited everyday chats with GPT-5.6 Luna.

A Northern Kentucky family has refused an anonymous AI company's $26 million offer to buy their land and transform it into a data center.

Michigan Democratic Senate candidate Abdul El-Sayed, who won a competitive primary Tuesday, has endorsed state and local moratoriums on data centers.

Pay it for content, like OpenAI and Meta, to become 'principled' and 'honorable'

DC Handal has deployed a new high-powered DC charger in Ipoh and it is currently their most powerful site in the city. The latest EV charging location is at Symphony Suites Hotel, Ipoh where there’s a covered 240kW DC Charger with two bays. This makes it an ideal spot to top up your EV especially […]