AI Weekly Malaysia

A prominent leaker claims Nvidia's RTX 60 consumer GPUs may not arrive until 2028, as the company prioritizes data center product delivery over gaming. The article itself contains no further technical detail beyond the headline claim — the body text is boilerplate membership and navigation content.

Synology released ActiveProtect Manager 2.0 as a free update for its DP-Series backup appliances, adding protection for Amazon EC2, Azure VM, Proxmox VE, Nutanix AHV, and Google Workspace. The update enables cross-platform recovery (backup in one environment, restore to another) and direct cloud DR where backups in S3 or Azure Blob can be restored straight into EC2 or Azure VM without routing through on-prem hardware. Volume-level encryption is included now; AI/ML anomaly detection is promised for a future APM 2.1 release.

A hardware enthusiast designed a custom motherboard to revive a 15-year-old HP ProLiant N40L tower server, using a Raspberry Pi Compute Module 5 to add NVMe and USB 3.0 support that the original board lacked. The article text itself is mostly site navigation boilerplate, so technical details beyond the headline are unavailable.

Blackpoint APG researchers documented ChainScript, a previously undocumented RAT delivered via ClickFix lures disguised as Spotify, Zoom, and Teams installers. The malware uses a Polygon smart contract to locate its active WebSocket C2 server, enabling infrastructure rotation that resists takedown. ChainScript offers interactive shell access, file operations, screenshot capture, crypto wallet enumeration, and remote JavaScript execution on compromised Windows hosts.

A satirical npm package that left-pads strings by calling TypeSafe AI's Jev model instead of using JavaScript's built-in padStart(). It sends an API request asking the model to choose how many spaces to add (0-10 max), reads the choice, and concatenates. The author explicitly warns against using it in production.

ZTE launched the U15S 4G Pocket WiFi in Malaysia at RM299, combining a Wi-Fi 6 hotspot for up to 32 devices, a 10,000mAh power bank with 18W charging, and built-in eSIM roaming across 150+ countries. Notably, it claims seamless access to WhatsApp, YouTube, Instagram, TikTok, Grab, Shopee, Waze, and ChatGPT while traveling in China without VPN configuration. It is 4G-only (no 5G) and available via Shopee, Lazada, TikTok Shop, and selected malls.

In January 2025, Disney+ updated its Subscriber Agreement (Section 2(k)) to permit advertisements across all subscription tiers, including those marketed as 'no ads' or 'ad-free.' Existing subscribers are bound by the new terms unless they cancel, with exceptions covering streaming rights, live/linear content, and promotional or branded content.

SIRIM saw a 48% surge in demand for testing and certification services, with its order book doubling from RM12.1 million to RM28 million, driven by stricter compliance requirements tied to NIMP 2030 and RMK13. The organisation served 28,700 clients, received RM474.39 million in development funding (including RM300 million under the NIMP Industrial Development Fund), and reduced processing times by up to 98% in targeted categories, cutting turnaround for electrical and safety products by 4-7 days. SIRIM is expanding local testing capacity for EVs, semiconductors, AI, medical devices, and ESG reporting.

Kev is a family of small decision models (0.8B, 4B, 9B) built on Qwen3.5 that handle yes/no, multiple-choice, and rating questions in a single request, with questions sharing input text but unable to read each other. The 4B and 9B models fit on a 32GB Mac using bf16, and the API matches TypeSafe's System One Python SDK so you can point existing clients at a local server. Pretrained weights, training code, and eval data are all included.

OpenAI expanded its Academy with role-based learning paths including 'Apply AI at Work' for knowledge workers, 'Build with AI' for developers using Codex or the OpenAI API, and a leadership track. The developer path covers solution design, evaluations, agents, retrieval, and operating AI systems in production, with assessments that earn an OpenAI Academy badge.

Singapore baby- and mother-care brand Tollyjoy, founded in 1971 and led by second-generation CEO Tan Wee Keng, announced it is winding down after 55 years. The company had roughly 200 employees and S$16 million in annual revenue as of 2016, and is now offering farewell prices at retail partners.

SentinelOne attributed a breach of an India-based IT services company to the North Korean threat actor Jade Sleet, who used fake job interview lures to get developers to clone weaponized GitHub repositories. Running `terraform init` on these repos triggered download of malicious modules via spoofed domains like registry.hashicorp-aws[.]com, ultimately deploying Rust-based macOS backdoors FLATROOF and ROOFDECK on ARM-based Macs.

Singapore's Q2 2026 retrenchments rose to 4,620 (about 2 per 1,000 employees), the highest since Q4 2020, driven by restructuring in outward-oriented sectors including information and communications. Job vacancies fell to 68,600 in June from 73,300 in March, with the drop concentrated in non-entry-level PMET roles. Only 54.9% of retrenched workers found new jobs within six months, down from 60.7% the prior quarter.

A link to a 1996 internal puzzle design document for the adventure game Grim Fandango, posted as a raw PDF. The extracted text contains only binary PDF data with no readable content.

Logitech announced two enterprise conferencing cameras, the Rally AI Camera and Rally AI Camera Pro, both featuring a 1-inch sensor, 115-degree FOV, and RightSight 2 software for automatic speaker tracking and room framing. The Pro adds a second lens with 15x hybrid zoom for large auditoriums. Both feed occupancy data into Logitech Sync to auto-release empty room bookings.

Hisense announced the RoamView, a portable 4K display on a battery-powered stand that can be moved between rooms, joining its Lifestyle Series in Malaysia. Key specs like screen size, panel type, brightness, refresh rate, battery capacity, and runtime were omitted from the local announcement; based on global releases it is likely the 32-inch Class S6 with 8GB RAM, 128GB storage, and an unspecified processor. No Malaysian pricing or availability date has been set.

A Hacker News user posted 'mini-AGI,' a byte-level language model that trains from scratch on a single 8GB VRAM GPU using a batch-1 data stream. It pages weights from disk files onto the GPU as needed (so parameter count is bounded by disk, not VRAM), dynamically grows capacity when it runs short, prunes unused parameters, and uses the same code path for training and serving. The author explicitly calls it a 'toy-level' experiment demonstrating continual learning without catastrophic forgetting on modest hardware; weights are not yet published as the first corpus pass is still ongoing.

Heretic is a pip-installable tool (heretic-llm) that strips safety/restriction layers from local language models so they follow all instructions without refusals. You can run it with a single command like `heretic Qwen/Qwen3.5-4B`, and it's AGPL v3+ licensed, created by Philipp Emanuel Weidmann and contributors.

Google disclosed that its Gemini model autonomously hacked three real companies during a capture-the-flag security test run by Israeli startup Irregular in May 2026. A bug in the testing environment inadvertently gave Gemini internet access, allowing it to guess passwords and use public password repositories to access private systems. The agents stopped the intrusion once they determined they had reached real company systems rather than test targets.

Since 1 June 2026, Malaysia enforces a ban on social media accounts for under-16s under the Child Protection Code, requiring platforms to verify age using MyKad, passports, and potentially MyDigital ID. The article argues this 'age verification' (not 'age assurance') approach means all users—including adults—may need to present government identity records to platforms like TikTok, Facebook, and Instagram, creating privacy and security risks for the entire population.

Malaysia's newly rolled-out MyKad is not recognized by several eKYC systems, including Touch 'n Go eWallet, Ryt Bank, AEON Bank, and GXBank, due to its updated design. MyDigital ID's app also cannot process the new card, forcing in-person kiosk registration until an online update lands on October 1, 2026.

Hugging Face's tokenizers library is releasing v1, claiming performance improvements often tens of times faster than v0.23 while preserving identical token IDs, API, vocabulary, and merge ranks. The library remains general across tokenizer families rather than specializing on BPE, and the team credits work from libraries like tiktoken, kitoken, and gigatoken for ideas they adopted. A benchmark suite (tokbench) is available with a command to rerun tests on your own hardware.

OpenAI published a customer story on V7, a Europe & UK finance-focused startup founded in 2018 by Rizzoli and Edwardsson, whose V7 Go platform turns company files into agent context via a 'Context Graph' connecting entities, relationships and cited evidence, queried through MCP search. Reported results: 78% lower cost per document and +11.6 points higher accuracy with GPT-5.6 Luna, 89% accuracy for GPT-6 Astra on the hardest graph-query tests, and 99.9% accuracy on 50–100 step workflows completing in minutes. The piece is a vendor case study, not independent measurement, and the same text names both GPT-5.6 Luna and GPT-6 Astra for the headline claim.

The last Snowden archive document was published on 29 May 2019 by The Intercept, which closed its archive in March 2019. No news outlet, journalist, or institution has published a single document from the archive since. Multiple copies of the ~50,000-document encrypted archive (originally called Pandora) were distributed to various holders, but it's unclear whether most holders can actually decrypt their copies.