AI Weekly Malaysia

Article URL: https://servo.org/blog/2026/09/15/one-year-of-sponsorship/ Comments URL: https://news.ycombinator.com/item?id=49737849

Article URL: https://events.ccc.de/en/2026/09/12/40c3-model-citizens/ Comments URL: https://news.ycombinator.com/item?id=49737787

ISC released BIND 9.20.29 and 9.21.26 to fix 14 security flaws, including CVE-2026-77692, which lets an unauthenticated sender crash any BIND server answering DNS-over-HTTPS with a single request carrying an invalid SIG(0) signature. There are no workarounds. The EOL 9.18 branch (including Debian 12's shipped 9.18.49) remains vulnerable with no fix planned.

Gyazo, Kyoto-based Helpfeel's image-sharing service, suffered a breach exposing 23.62 million user records (emails, password hashes, session IDs, X/Twitter integration tokens, Google SSO emails) and 490 million image metadata records. The attacker exploited a vulnerability in Gyazo's image upload server, ran arbitrary commands, and accessed the database; image IDs in the metadata could be used to view private images without permission, and Helpfeel has temporarily disabled viewing of some.

Steve Yegge shut down Gas Town and admitted that despite spending thousands monthly on coding agent subscriptions, he never successfully built anything beyond Gas Town itself—echoing Dan Luu's earlier finding that 'ultra vibed orchestrators' fail on task-completion reliability. Separately, Databricks rolled out Astra to ~3500 engineers and found it outperforms Opus 5 and Sol 5.6 on complex system-design tasks, but drove a +60% increase in overall spend.

Reddit co-founder Alexis Ohanian told CNBC the tech industry has done a 'pretty tone deaf job' of explaining AI risks, arguing the public debate should focus on substantive risks rather than Terminator-style scare scenarios or political point-scoring. His comments follow recent warnings from researchers at OpenAI and Anthropic about recursive self-improvement (RSI), where AI systems help develop more capable AI systems.

Cisco disclosed a maximum-severity zero-day (CVE-2026-76460, CVSS 10.0) in Identity Services Engine (ISE) and ISE-PIC, actively exploited in the wild. The flaw allows unauthenticated remote attackers to bypass authentication on an API endpoint, potentially gaining root-level command execution. Patches are available across versions 3.1 through 3.5, with no workarounds beyond iACL mitigation.

Anthropic is opening its fifth APAC office in Singapore this October, hiring locally and appointing Dale Finlay as ASEAN GM to drive enterprise adoption across Southeast Asia. Singapore ranks 2nd of 121 countries in Claude.ai usage per capita (5.81x expected), and Anthropic is targeting regulated sectors like financial services and government where demand is strongest.

The U.S. DoJ and FBI, with Canadian RCMP support, seized domains for NightmareStresser, a DDoS-for-hire service active since 2022 with over 566,000 registered users and 52 servers. The service was used to launch hundreds of thousands of DDoS attacks against educational institutions, government agencies, gaming platforms, and individuals, and was protected by BlazingFast infrastructure.

Iceland-based Treble raised $18M (Series A extension led by Paladin Capital Group, total raised over $40M) for a voice AI simulation platform that generates synthetic audio data and evaluates voice models under realistic conditions. Customers include Amazon and Logitech; the company also partnered with Hugging Face on a speech recognition benchmark across varied conditions earlier this year.

TechCrunch promotes a Disrupt 2026 session titled 'Hiring When AI Is a Co-Founder,' featuring Gusto CEO Josh Reeves, Insight Partners SVP Michelle Johnson, and Leland CEO John Koelliker discussing how early-stage startups can delegate engineering, support, and operations work to AI agents instead of hiring. The session is scheduled for October 13–15 at Moscone West in San Francisco.

Satu Creative's Creative Sprint 2026 graduated 21 social enterprises from Central and Northern Malaysia (KL and Penang editions), its third year running. The program covers three themes—Income Pathways, Heritage Conservation, and Circular Solutions—and offers grants up to US$25k, with backing from Yayasan Hasanah, BSN, Digital Penang, MBAN, and Artem Ventures.

Article URL: https://ryan.science/blog/keys-not-included Comments URL: https://news.ycombinator.com/item?id=49735930

The Kelana Jaya LRT line is experiencing delays due to a signalling and communication system disruption between USJ 21 and Taipan stations. Rapid KL has switched to manual train control on that stretch, reducing speeds and increasing platform dwell times while technical crews work on restoration.

Snap unveiled new features for its $2,200 Specs smart glasses at an LA event, including HBO Max and Spotify integration and a new 'Specs Intelligence' anticipatory AI system that connects with iPhones and Macs to understand user goals, routines, and relationships. The updates come after a poorly received launch earlier in 2026 that triggered stock decline and calls for CEO Evan Spiegel to resign.

Lowyat.NET published an article about the new MyKad, but the provided text contains only site navigation boilerplate with no article body. No concrete details about the new MyKad—features, rollout dates, chip changes, or digital identity implications—can be extracted from the source.

Lowyat.NET announced that a new-generation MyKad rolls out today (17 September 2026), but the article body was not captured—only site navigation boilerplate is available. No technical specifications, chip changes, security features, or rollout details are present in the provided text.

Anthropic published a customer story featuring Balyasny Asset Management (BAM), a ~$38B AUM firm with ~2,000 staff, describing how Chief AI Officer Charlie Flanagan's team uses Claude Fable 5 with an in-house agent harness. BAM reports that merger-arbitrage analysis work that previously took 3-5 days now completes in under one day via a ~30-minute agent run with human review before material output is used, and that they evaluate new models on thousands of real financial tasks with verifiable outcomes.

OpenAI announced Astra for Law, combining GPT-6 Astra with a legal search index covering 230M+ URLs (including 99.9% of published U.S. precedential case law via Free Law Project), 26 ecosystem plugins for tools like Relativity and Clio, and tailored settings for legal analysis. On Vals AI's Legal Research Bench (200 U.S. legal research questions), Astra for Law passed overall correctness on 54.0% vs 38.7% for GPT-6 Astra with web search. API customers Harvey and Legora are early build partners.

Anthropic redesigned Claude Code's 'Projects' feature to shift from static folders to a conversational, multi-threaded agent system. A coordinator agent scopes a goal, delegates work to parallel threads, runs tests, opens PRs, and assembles the results, allowing users to steer progress via a main chat or individual threads. The beta is currently rolling out to select Claude Pro and Max subscribers using cloud sessions in Claude Code.

Anthropic launched the Life Sciences Verification Program (LSVP) in beta, giving verified life-science teams access to Mythos 5.1, Opus 5, and Sonnet 5 with classifiers more permissive for biology tasks than generally-available models. Two grant tiers exist: Standard Use (annual renewal, team-wide, covers most R&D workflows) and High-risk Use (six-month renewal, single-project, removes all blocking safeguards). Access is via Claude Science, Claude.ai, Claude Code, and the API; individual Pro/Max access is planned for later.

Valor Equity Partners, founded by Antonio Gracias, is transferring 8.5% of its SpaceX holdings (worth ~$8.5 billion) directly to its limited partners rather than selling on the open market, per an SEC filing. The move avoids flooding the market with shares—SpaceX is already down ~10% since its IPO—and may offer tax advantages to LPs. Valor will retain over 460 million shares after the transfer.

At TechCrunch Disrupt 2026, Al Gore argued that AI data center emissions are a fraction of emissions from uncovered landfills globally, and that air conditioning demand—expected to triple by 2050 per the IEA—will put far more pressure on the grid than AI data centers. He said the warnings from inside the AI industry itself concern him more than the data center backlash, a position he has held since at least May.

Snap is partnering with Nvidia, AWS, and Salesforce to push its $2,195 Specs AR glasses into the enterprise market, positioning the device as a computer rather than consumer smart glasses. Spiegel cited Nvidia's open-source XR AI platform as something businesses are already building on, and pitched use cases like field technicians troubleshooting equipment, contrasting Specs against bulkier failed devices like HoloLens and Meta Quest.

At Dreamforce 2026 in San Francisco, Salesforce issued fiscal 2030 revenue guidance of over $63 billion, beating the $59.2 billion analyst consensus from LSEG. The announcement comes after a volatile period where the 'SaaSpocalypse' narrative—driven by fears that frontier AI models would erode SaaS demand—punished Salesforce and peers in 2025, though the company rebounded with better-than-expected earnings last month.