AI Weekly Malaysia

Binance confirmed that North Korean hackers stole a record $6.3 billion in crypto last week after posing as recruiters, putting a wallet engineer through two interviews, and sending a malicious coding assignment that compromised the engineer's work-issued laptop. Binance said its security tools did not detect the malware; the foothold let attackers reach an internal tool that could take over work computers of two other wallet-team engineers, one of whom had months earlier downloaded a tampered app containing password-stealing malware from search results. Binance suspended customer withdrawals across its network after disclosing the hack in an updated statement on X.

Fal, a San Francisco startup that hosts and runs AI video, image, and audio models, raised $1.3B in a Series F led by Bessemer with Nvidia, Sound Ventures, and T. Rowe Price participating, valuing it at $16B — double its $8B valuation from April. The company disclosed Series E and F together for $1.65B combined (Sequoia led the earlier round) and had surpassed $800M in annualized revenue earlier this year. TechCrunch notes that inference providers like Baseten, Fireworks AI, and Modal are also raising large rounds, but gross margins stay thin because of the cost of buying or leasing compute.

Reddit began testing ads in search results pages with a select group of eligible advertisers, saying placements may be chosen by contextual relevance to the query—e.g., an “espresso station” search could show espresso machine, coffee, or mug ads. The test follows Reddit’s warning of declining search traffic and Q4 revenue guidance of $1B–$1.03B, below the $1.05B expected, which the article ties to Google’s AI-powered search reducing clicks to sites.

On CNBC, Jim Cramer said "you should just go buy CrowdStrike" after interviewing CEO George Kurtz, calling the company's new "AI Kill Switch" a "holy grail" for cybersecurity; the stock rose about 1% on the comment. CrowdStrike unveiled the kill switch at the European leg of its Fal.Con conference as a feature of Falcon Guardian, its AI Detection and Response product launched in September that is aimed at securing AI agents able to think, plan, and act on their own inside company systems. The article describes the tool only as letting security teams "take control of AI agents that stray from their assigned behavior" — it gives no mechanism, pricing, availability date, or customer detail.

TechCrunch marks the ten-year anniversary of Hillary Clinton's 2016 Virginia rally line — "I'm trying to figure out how we get them to have Pokémon Go to the polls" — which became a durable Election Day meme. The piece traces what changed since: campaigns now hire meme managers, podcasters get press briefings, and Pokémon Go itself has been sold to a company wholly owned by Saudi Arabia's sovereign wealth fund. Its only builder-relevant claim is a passing aside that "most app developers aren't even writing their own code anymore, thanks to AI," offered without evidence.

Ferrari CEO Benedetto Vigna said on the Q3 earnings call that the 2027 production run of the Luce — Ferrari's first EV, a five-seater designed by Jony Ive that was widely mocked after its May debut and sent the stock lower — is "fully allocated," with buyers waiting about a year. The car starts at roughly $615,000, first deliveries are expected in Q4, and the Financial Times reported Ferrari planned just under 500 units this year against a 2030 target of 2,500 (~600/year). Ferrari also said customization options accounted for more than 21% of revenue from cars and spare parts.

mSecure has warned users to change their passwords and reset two-factor authentication and passkeys after suspicious activity. The Hacker News item gives no further technical details in the supplied text, such as affected versions, scope, root cause, or number of users.

Netflix is rolling out an "AI Discover" tab, announced Tuesday, that opens with mood- and context-based themes such as "something light," "scare me," "family movie night," and "quick watches," each showing clips from matching titles. Picking a theme returns recommendations, with a "something different" option to reset and a "Tune Your Recommendations" button next to Play and My List on each title to save or exclude suggestions. Netflix says the tab runs on a new "intelligence layer" that responds to what users say in real time and keeps learning, but the post gives no model, latency, or cost details.

Binance co-CEO Richard Teng said attackers spent months infiltrating wallet infrastructure: in June they set up a fake developer tool that an engineer installed, and in September they posed as recruiters and gave another engineer a coding exercise containing hidden malware. Teng said the attackers then moved through internal AI tools to reach the system that authorized wallet transactions, in the Oct. 29 attack that stole more than $6 billion; Binance says it has replenished 98% of $6.34 billion in affected assets and is still purchasing illiquid assets.

Meta is selling bonds to raise between $20 billion and $25 billion, with roughly two-thirds denominated in U.S. dollars and one-third in euros, and final pricing expected Tuesday afternoon. The sale follows S&P Global Ratings revising Meta's outlook from AA- stable to AA- negative on Friday, citing uncertainty over its capex spending and negative free cash flow. Bloomberg first reported the plans; Meta declined to comment.

The New York Times has demanded that Brave shut down its paywall-blocking feature and terminate its deals with AI companies, according to Ars Technica's report dated November 3, 2026. The lawsuit describes Brave as a "supplier, dealer, and distributor" of stolen news content, framing the browser's AI data partnerships as part of the same grievance as its paywall circumvention. The item drew 22 comments on Ars Technica; the article body available here is truncated, so filing details, specific deal names, and the legal claims beyond that quoted phrase are not available.

Ars Technica's Jonathan M. Gitlin writes that car interior design is swinging back toward physical buttons and away from piano-black surfaces, with more storage prioritized, using the 2027 Nissan Rogue Hybrid SR as the visual example and quoting Nissan designer Hiren Patel. The supplied text is largely page navigation and boilerplate — the substantive design argument is cut off after the opening, so only the thesis, the model name, the designer's name, and the 11-comment thread count are actually verifiable here.

The Hacker News headline states that Chainstack reported a breach of its production systems that exposed customer data and password hashes. The excerpt supplied here contains only site navigation and the headline itself, with no incident timeline, affected customer count, root-cause detail, or company statement.

CrowdStrike is acquiring two AI security startups: Fiddler AI, which makes observability software for monitoring AI agents inside enterprises, for around $400 million, and Dreadnode, which automates security testing to catch flaws in AI models, apps, and agents before they go live, for about $95 million (figures per The Wall Street Journal). CrowdStrike frames this as extending its existing Falcon Guardian detection-and-response controls for seeing what agents do on company devices. The article is an acquisition announcement and cuts off mid-sentence on Fiddler's plans, so there is no technical detail on how either product actually works.

Ars Technica reports that Google will let schools opt out of its AI tools, but schools that decline the AI tools must also give up Google Search — an all-or-nothing bundle rather than a menu. Google is pitching the AI tools as ones that "purportedly don't give away the answers" to students. The supplied excerpt is cut off mid-sentence ("While Google is trying to move beyond Ch..."), so no pricing, contract terms, named school districts, or rollout dates are available here.

GitHub issue #14370 (opened Oct 25, 2026) reports that Postman desktop 12.33.4 on macOS auto-installed Claude Code and Codex plugins without asking, per Postman's own log line `autoInstall.plugin.existing-user finished {"outcome":"installed"..."scriptResults":"claude-code:installed,codex:installed"}` at 2026-10-24T09:34:14Z. The installer wrote into `~/.codex/config.toml`, adding a `marketplaces.postman` git source pointing at `github.com/postmanlabs/postman-plugin`, enabling `postman@postman`, and recording trusted hashes for a `session_start` hook. The reporter says the hook instructs the agent to route broad API work through Postman, and separately flags a remote MCP connection, a Postman CLI install, and recurring MCP auth warnings. Codex Postman plugin version 1.1.0, source revision 6c8e452; the thread drew 284 points and 93 comments.

Ars Technica reports that another child has died of measles, and that the CDC is reportedly holding up a health alert about the outbreak. The piece, published November 3, 2026, notes that New York's governor pointed to Kennedy's long-standing anti-vaccine work as spurring outbreaks. The supplied excerpt is truncated, so it does not include the alert's exact contents, case counts, or the CDC's stated reason for delay.

Ai2 released StateBench, a benchmark that splits long-context state tracking into four difficulty levels modeled on variable assignment — from R-trivial cases where a value is set once and never changes (let x = 4, a birth date), to aperiodic cases requiring the model to find the most recent reassignment. In their evaluation, recurrent and hybrid architectures such as Gated DeltaNet generalized much farther than transformers when trained directly on these tasks, while frontier models including Gemini 3.8 Flash, Claude Opus 5.5, and GPT-6 Sol and Luna still broke down on harder state tracking as inputs grew longer. Tech report, dataset, and code are linked from the post.

Singapore-based NCS launched an AI Mission Centre and committed to growing its team of Intelligentisation Forward-Deployed Engineers (iFDEs) from about 100 today to more than 300 within two years, mixing reskilled staff and new hires. It announced three AI deployment MOUs — Changi Airport Group, the Institute of Mental Health, and Life3 Biotech — and positions its Sunshine.AI suite underneath the work, including Sunshine.core for building and governing enterprise AI agents and Sunshine.commanderAI for coordinating robots from different manufacturers. The article cites a Christian & Timbers study of 550+ engineers and executives putting top US forward-deployed engineer pay at US$586,000–1.45 million a year, while noting no equivalent data exists for Singapore.

Google has dismantled a botnet tracked as "x.cpe" that was running covertly on roughly 1.3 million Android TV boxes, and has cut ties with the company behind the campaign. Ars Technica's report names the Mecool KT1 as one of the affected devices and notes Google published the finding on 3 Nov 2026. The excerpt available here is truncated, so the infection vector, the number of distinct device makers involved, and what "cut ties" means operationally are not stated in the text.

Anthropic's updated S-1 filing extends disclosures from June 30 to September 30, 2026, showing quarterly revenue of $17B (up from $11.5B) but a widening operating loss. Compute costs hit $10B for the quarter and rose to 58% of revenue from 48% the prior quarter, and revenue per dollar of compute peaked just above 2x before falling to 1.72x. The filing attributes part of the strain to $5.0B of compute bought under short-term commitments, which it says currently costs significantly more than comparable multi-year capacity.

Tom's Hardware reports that Microsoft claims Windows 11 is now 20% more responsive and 40% faster at multitasking on memory-constrained machines, specifically calling out 8GB RAM configurations. The article frames the improvement against AI demand pushing memory prices up, but it does not provide a Windows build number or independent benchmark data.

The item is a The Hacker News headline dated 3 November 2026 — "Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft" — but the supplied text contains only site navigation, newsletter links, and the headline itself. No incident details are present: no attack chain, no named AI tools, no dates, no Binance statement, no breakdown of the $6.43 billion figure. Nothing in the body supports any specific claim about how the theft worked.

Ars Technica's Eric Berger profiles Argo Space, which is building a spacecraft called Argonaut around water as propellant — the teaser frames it as "a propellant available everywhere," with a rendered image of Argonaut transiting to the Moon. The excerpt available here is only the headline, dek, byline, and image caption; no figures, timelines, funding, technical specs, or test results are included.

Also, a micromobility startup spun out of Rivian in 2025, quietly did early-stage work on an electric two-wheeler pilot in Kenya and then walked away. The project had grant funding from the Shell Foundation and was meant to test a locally integrated e-moto platform, modular batteries, and distributed EV charging; Also said it completed only 'some early-stage work' and refocused on its core e-bike and autonomous-vehicle roadmap. The Shell Foundation said the grant will follow the project, while Also declined to give specifics.