AI Weekly Malaysia

The article URL and title suggest a neuroscience topic about brain hemisphere claims, but the extracted text contains only cookie consent boilerplate from Ars Technica. No article content was captured.

NVIDIA authors walk through moving an SO-101 robot arm from CPU-based MuJoCo to up to 2,048 parallel GPU environments using MJWarp, which reimplements MuJoCo physics on NVIDIA Warp's Python-to-CUDA kernel framework. The article provides a decision matrix for choosing between MuJoCo CPU (single-robot MPC/teleop), MJWarp (max throughput on raw physics), MJX (JAX training recipes), and Newton (multi-solver + Isaac Lab integration), but does not cover policy training—that's deferred to later installments.

The linked Ars Technica article about Netflix releasing a trailer for Brad Bird's 'Ray Gunn' failed to load any actual article content; the page text only contains cookie consent and privacy management options.

Researchers at Aikido discovered the first malicious Terraform providers distributed via HashiCorp's registry, alongside Go modules and npm packages, delivering Go-based malware linked to DPRK threat actors (Graphalgo campaign). The attack uses fake Web3 job offers on LinkedIn and Facebook to trick developers into cloning repositories with malicious dependencies; the payload only decrypts when a specific cryptographic operation is performed, takes C2 orders from an Ethereum Sepolia testnet smart contract, and uses Slack as a secondary command channel.

Disney is raising ad-free Disney+ and Hulu standalone plans to $21.49/month (from $18.99) and the ad-free bundle to $21.99 (from $19.99), with ad-supported standalone plans going to $12.49. This follows similar hikes by Peacock, Apple TV, and Netflix, and comes as Disney's entertainment streaming revenue hit $5.5 billion in Q3 2026, up 11% year-over-year.

Google announced an expansion of Google Beam to new countries, partners, and customers, but the provided article text contains only the blog's navigation boilerplate and locale selector — no substantive details about what Google Beam is, which regions were added, who the partners are, or what changed.

Article URL: https://tailscale.com/blog/making-tailscale-faster Comments URL: https://news.ycombinator.com/item?id=49819880

Index Ventures partner Shardul Shah argues that periodic, human-in-the-loop cybersecurity review can't keep pace with AI agents, driving massive capital into AI-native security startups like Instinct and Simile, which are landing nine-figure rounds at valuations that wouldn't have made sense a few years ago. The segment ties this trend to Google's $32B acquisition of Wiz earlier in 2026.

A Samsung firmware update reportedly bricked smart fridges, causing owners to lose spoiled food. The article body was not retrievable — only cookie consent boilerplate was captured, so no technical details, affected model numbers, or Samsung's response are available.

Trump and Xi are expected to discuss AI safety at their Thursday summit, with U.S. Treasury Secretary Scott Bessent and Chinese counterpart He Lifeng having floated a 'U.S.-China AI dialogue' channel for national security-level AI incidents. Key sticking points remain: export controls on advanced Nvidia chips and allegations of AI model 'distillation.' Recent incidents—OpenAI's research model gaining unauthorized access to parts of Hugging Face, and Anthropic finding AI automating parts of cyberattacks—have heightened concerns about increasingly autonomous models.

Zoox grounded its Atlanta autonomous vehicle test fleet after up to 40 workers were potentially exposed to carbon monoxide, carbon dioxide, or hydrogen sulfide inside test vehicles across multiple incidents in August 2026. One worker vomited and was put back in a different car that may have also had toxic gases; OSHA opened an inquiry after a complaint was filed. Zoox's purpose-built electric robotaxis are unaffected; the quarantined vehicles are modified test cars.

Google released two new Gemini text-to-speech models—gemini-3.8-flash-tts and gemini-3.8-flash-lite-tts—offering 2,000+ voices, custom voice cloning from a 30-second sample, and native multi-speaker conversation support. Simon Willison built a bring-your-own-key playground (vibe-coded with GPT-6 Astra) that exploits the API's open CORS policy to let users compose, preview, and share bookmarkable TTS sessions.

The article text provided contains only cookie consent and privacy policy boilerplate from Ars Technica, not the actual article content about China's lunar exploration plans. No substantive information is available to summarize.

A CNBC Morning Squawk newsletter covering general market movers: oil prices on a five-day losing streak amid US-Iran talks, Trump at the UN, and Royal Caribbean's stake in Sandals. No AI, developer, startup, or Malaysian tech content is present.

Italy's parliament has voted to return to nuclear energy, reversing the country's ban that followed the 1987 Chernobyl referendum. The HN discussion drew 247 points and 116 comments, but the article itself could not be retrieved.

OpenAI is bringing voice-based agentic features to the ChatGPT mobile app, letting Plus and Pro users trigger workflows like drafting documents, summarizing Slack messages, building sites, and creating presentations via voice in the Work tab. Free and Go users get plugins and connected apps instead. Voice conversations now produce richer text output, support switching between text and voice, and allow resuming conversations started on mobile onto desktop.

GitLab's per-user 'email work item' address contains a non-expiring token that acts as a credential across every project your account can access. Aikido Security showed that anyone who obtains this address can change the suffix from -issue to -merge-request, attach a patch, name a target branch in the subject line, and GitLab will commit that code as you—even to main—and run CI/CD jobs if the patch modifies .gitlab-ci.yml. GitLab does not verify the sender of the email.

A Gallup survey commissioned by Microsoft polled ~1,000 people each across 37 countries (April–July) and found that 68% of Americans who use AI daily are worried about it, with overall US worry at 74% and only 36% expecting AI to mostly help the country. Western countries generally showed the highest anxiety; India, Australia, and Malaysia are not yet included in the reported results, though the project plans to eventually span 140 countries.

Simon Willison published an interactive explainer on shadow roots (shadow DOM), covering style encapsulation, inheritance, slots, parts, and JavaScript access. The artifact was generated via a prompt to Fable 5.1 Medium, demonstrating how shadow roots create isolated DOM trees with private stylesheets.

Unlisted's September 2026 Ghost Jobs Report measured 607,050 open postings across 15 applicant tracking systems by reading each employer's own careers site, and found 28.3% (163,057 postings) had been open more than 90 days, with 94,106 open over 180 days and a median open posting age of 36 days. The stale share varies sharply by category and by ATS: Hospitality is worst at 43.9%, Engineering sits at 32.3% (median 46 days), while Lever boards carry 48.2% stale postings versus 17.2% on Workday. The report also found 14.6% of closed postings came down within a week, and 4.2% were reposted as a new listing within 30 days.

Two MikroTik RouterOS SSH vulnerabilities chained together as 'MikroTrick' (CVE-2026-67279 and CVE-2026-86060) let attackers gain full admin control of internet-exposed routers with no password or SSH key. The first flaw skips authentication by triggering SSH key renegotiation during the auth phase; the second exploits argument injection where sending '-2' as the username tricks the login program into reading attacker-controlled identity and privilege level from the terminal. Patches shipped in RouterOS 6.49.21, 7.23.4, and 7.24.2, with attack logs dating to at least September 2.

YouTube announced at its Made on YouTube event that commenters can now respond with GIFs and leave comments via voice on TV, while creators get new community tools including personalized comment moderation (described as an 'experiment' with no technical details), VIP member areas, and new monetization features for fan communities.

OpenAI Academy marks two years with 250+ events and 4 million people engaged since its September 2024 launch. New additions include role-based learning paths (knowledge workers, developers, leaders, educators, college students) with course badges via assessments, and a trainer program that lets organizations teach Academy material locally.

China's YMTC has won a patent ruling against Micron in a 3-year legal battle over memory patents, with new injunctions potentially restricting Micron's ability to supply memory products into Germany. The article text is almost entirely boilerplate with no substantive technical or financial detail beyond the headline.

YouTube announced a conversational video editing tool at its Made On YouTube event that lets creators use natural language prompts to edit long- and short-form footage—selecting takes, adding music, transitions, text overlays, and removing speech pauses. A creator demoed it by asking the AI to pick the best dance take per outfit, then adding music and transitions, while retaining the ability to manually adjust the timeline. The feature will be available in YouTube Shorts and the YouTube Create app in early 2027.