AI Weekly Malaysia

The linked Ars Technica page, as captured, contains only the site's privacy/cookie-consent boilerplate — no reporting text. The only substantive information available is the headline: Microsoft reportedly projects a $1,200 to $1,800 price for "Project Helix" in 2028. No product details, sourcing, specs, or confirmation appear in the supplied text.

TechCrunch reports SpaceX's AI-related business now makes up 52% of its income, including the recently acquired Cursor coding tool, Grok agents, and a neocloud business with 1.7 GW of compute. SpaceX reported $14.6 billion in third-quarter revenue, $19.6 billion in capital expenditures, and $4.4 billion net income, a turnaround from a $1 billion loss a year earlier, though it still had a $413 million net loss over the first nine months. Elon Musk predicted annual recurring revenue by the end of 2027 will be 'somewhere between $500 billion and $1 trillion.'

OpenAI acquired Orchestra Bio, a four-year-old AI biotech software startup that builds agents for drug-discovery operations such as tracking finances and resolving clinical-trial scheduling. Terms were not disclosed; Orchestra had reportedly raised about $20 million as of 2025 from Andreessen Horowitz, Atria, and 8VC. The team and tech go into Rosalind, OpenAI's life-sciences model, and Rosalind Workbench, its experiment-planning and results-analysis harness, which OpenAI says is already used by Moderna and Novo Nordisk.

The fetched page contains only Ars Technica/Conde Nast consent and cookie-management boilerplate — no article body, no details on JustWatch's streaming service, pricing, catalogue, launch markets, or dates. The only substantive claim available is the headline: JustWatch, a streaming-availability aggregator, is launching its own streaming service. Nothing in the supplied text supports a concrete summary of what changed.

The PHP project issued an urgent advisory for two critical unauthenticated RCE bugs fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35: CVE-2026-109618 (out-of-memory handling leaves request data partially initialized, then cleanup treats it as valid) and CVE-2026-109619 (request-owned state survives after its memory is freed and is reused by a later request on the same worker). Risk is highest for Apache mod_php, where a demonstrated exploit fires before any application code runs; PHP-FPM, php-cgi, FrankenPHP and LiteSpeed are also listed as at risk. PHP 8.1 and older get no project updates, the volunteer rpms.remirepo.net repo will not have updates on release day, and the team shipped only minimal source backports for 7.4/8.0/8.1. Interim mitigations (not fixes) are memory_limit=-1 enforced via php_admin_value so apps can't override it, plus post_max_size=8M, or 32M if uploads are needed.

The PHP security team posted a pre-disclosure notice for two vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated CVSS v4.0 9.2 (Critical), with a coordinated release set for Wednesday 21 October 2026 at 14:00 UTC. The announcement, posted by Jakub Zelenka to php.announce, gives no affected versions, no vulnerability class, and no exploit details, and states the team may ship earlier if details leak or active exploitation is detected. The Hacker News thread drew 811 points and 322 comments, largely speculation in the absence of technical detail.

Salesforce agreed to acquire customer engagement platform Braze for about $5.66 billion, paying Braze Class A holders $47.50 per share in cash — a premium over Braze's $30.04 Monday close, which sent the stock up more than 50% after a premarket halt. Salesforce shares slipped roughly 1% on the news, and the deal is expected to close in Salesforce's fiscal 2028, pending shareholder and regulatory approvals. Braze makes AI marketing tools for managing customer data and messaging; CEO Bill Magnuson said the plan is to 'continue building as Braze' and invest in its customer and partner community.

The supplied page contains only Ars Technica's consent-management boilerplate, not the article body. All that survives is the headline: Meta reportedly removed the word "train" from its commercial terms of service following an AI-related backlash. There are no dates, clause text, quote, or scope details in the extract to verify what actually changed or which products the TOS covers.

The supplied page contains only Ars Technica's cookie and privacy-consent boilerplate, not the article body, so there are no concrete details about Gemini's 'Personal Intelligence' in cars — no models, versions, automakers, dates, or rollout regions. The only verifiable facts are the headline and the published timestamp of 2026-10-20T20:00:33+00:00.

Google is upgrading Gemini in vehicles with a "Personal Intelligence" feature that can draw on Gmail, Google Calendar, YouTube, Maps, and Search history to answer context-aware requests. It rolls out in Android Auto starting today and expands to cars with Google Built-in in the coming months, but drivers must opt in. Google's example is an airport drive where Gemini can surface a calendar flight delay and gate in one interaction.

The item is an Ars Technica piece headlined "OpenBSD 8.0 lands with Intel Arc graphics support," published 2026-10-20. The retrievable article text is almost entirely a Condé Nast consent-and-cookie notice, so the only substantive claims available are the title's: an OpenBSD 8.0 release, added Intel Arc graphics support, and a still-unbroken security record. No version specifics, driver details, benchmark numbers, or changelog entries are present in the text.

The fetched page contains only Ars Technica's cookie-consent boilerplate — no article body, no details on which eight TLS certificates were compromised, which certificate authorities or domains were affected, when the compromise was detected, or what the remediation steps are. The headline claims a 'high alert' over 8 compromised TLS certs, but nothing in the supplied text substantiates the scope, cause, or response.

Simon Willison published Battle Drones, a browser-based Command & Conquer-style RTS built over 12 major iterations and 321 commits from coding agents (mainly Claude Code), playable on mobile and desktop. It ships 9 buildings, 7 ground vehicles, 6 aerial vehicles and 3 infantry units as 3D models, six maps across five biomes plus a random map generator, fog of war, Skirmish and Last Stand modes, AI personalities, an AI-vs-AI spectator mode, and an Agent vs. Agent mode where two LLMs play each other. The headline trick is multiplayer between two nearby devices that synchronise game state over audio messages, an extension of his earlier Chirp Pong experiment.

GM confirmed it is closing the Brownstown Battery Assembly Plant south of Detroit, which built battery packs for the Cadillac Celestiq and both drive units and packs for the Chevrolet Corvette E-Ray; Automotive News first reported it. A GM spokesperson said the closure is not about EV strategy — GM leased the site and the lease was nearing its end — and affected employees and work will move to other GM facilities, though GM would not say which. The article also notes GM's EV incentives were repealed by the One Big Beautiful Bill Act, and that GM is still researching lithium-manganese-rich and sodium-ion chemistries plus standing up a $900 million commercialization facility.

SF Compute's Evan Conrad explains the company's shift from subleasing a GPU cluster to operating much of a cloud so it can physically settle traded GPU-hour contracts, not just cash-settle against an index. The episode details how contracts encode constraints like interruptibility, storage-recovery speed, GPU generation, networking, and software configuration, and why SF Compute matches orders across variants rather than waiting for fully interchangeable clusters. It was recorded at AI Engineer NYC's new Compute Trading track.

The supplied page contains only Ars Technica's cookie/privacy consent boilerplate — no article body. The headline states TP-Link pledged to assemble routers in the US in an effort to appease the Trump administration, but the text provides no dates, volumes, factory locations, model lines, cost figures, or regulatory conditions attached to that pledge.

The supplied page contains only Ars Technica's cookie and privacy consent boilerplate — no article body, quotes, figures, or claims about the US medium-lift launch market. The headline poses a question about whether any company wants to win the medium-lift race, but nothing in the text supports an answer.

Google open-sourced TorchTPU, a PyTorch version that lets AI apps run on TPUs and move to Google Cloud with a configuration change rather than a rewrite; Amazon released TorchNeuron for Trainium/AWS a day earlier and is submitting PyTorch code to decouple features from Nvidia chips. PyTorch, originally built by Meta in 2016 and moved to the Linux Foundation in 2022, is used by some 85% of AI apps, according to the article. Google says it worked with Meta, Hugging Face, vLLM maker Inferact, and SGLang maker RadixArk on TorchTPU.

OpenAI added Locked Chats to ChatGPT: users move a conversation into a separate "Locked Chats" section, kept out of regular history, pinned chats and search, protected by a four-digit PIN or Face ID/Touch ID on supported devices. Locked Chats gets its own memory shared only among locked conversations, and resetting the PIN permanently deletes all locked chats, files and content tied to the old PIN. OpenAI explicitly says locking does not add end-to-end encryption or a separate encrypted vault, does not change retention, does not strip information ChatGPT remembered before locking, and does not change the "Improve the model for everyone" setting; the feature is also unavailable for temporary chats, archived chats, group chats, shared-link chats, chats with scheduled tasks and chats with meeting recordings.

Permit Pending is a free browser city-simulation game where you play an elected mayor and must push apartments, bus lanes and factories through hearings, reviews, objections, lawsuits and appeals; the page lists a seven-seat council, four-year reelection, resident ages/incomes/homes, and scenarios starting at 200, 2,000 and 25,000 residents. It was posted as Show HN and drew 686 points and 352 comments.

The supplied page contains only Ars Technica's cookie-consent and privacy-preference boilerplate — no article body. Beyond the headline claim that Ukraine used a drone to rescue a wounded soldier, the text gives no details: no drone type, no date, no operators, no technical mechanism, no sourcing.

NVIDIA published Cosmos3-H-Dreams, a world-foundation-model simulator that learns surgical scene dynamics directly from video plus robot kinematics rather than modeling tissue physics explicitly. It was trained on clinical cholecystectomy recordings from the CMR Surgical Versius platform — the team claims this is the first real-time generative surgical simulator trained on clinical cholecystectomy footage with live kinematic control — and runs interactively on a single NVIDIA RTX PRO 6000 GPU using the FlashDreams streaming-inference library. It follows the earlier Cosmos-H-Dreams (built on Cosmos-Predict2.5) which only handled dVRK tabletop suturing.

The supplied page text contains only Ars Technica's cookie consent and privacy boilerplate — no article body, figures, or claims about quantum error correction are present. The headline mentions error correction going "well beyond breakeven," but nothing in the extract explains what was measured, by whom, or with what hardware.

Bloomberg reporting cited by TechCrunch says Eric Schmidt owns roughly 1% of Anthropic from a tens-of-millions investment in its 2021 Series A, when the company was valued at $461 million — about half the 2% stake held by co-founder and CEO Dario Amodei. Anthropic is widely expected to go public before the end of the year, with top-end estimates valuing it at up to $2 trillion, which at that figure would add as much as $20 billion to Schmidt's $57.5 billion net worth. Neither Schmidt nor Anthropic commented.

AMD's FSR 4.1 now works on Radeon RX 6000 GPUs, Xbox Series X and S, and Ryzen AI Max, AI 9, and Z2 SoCs. Tom's Hardware describes it as bringing the newer upscaling tech to older hardware at a small performance cost. The provided page text does not include benchmark numbers, pricing, or game-specific results.