AI Weekly Malaysia

The article content was not captured — only cookie consent boilerplate from Ars Technica is present. No substantive details about the Flock camera legislation or highway funding threat are available in the provided text.

TechCrunch Disrupt 2026 exhibitor table booking closes Friday, September 18 at 11:59 p.m. PT. The event runs October 13-15 at Moscone West in San Francisco, expecting 10,000+ attendees, with exhibit packages including a 6′×30″ table, 10 team passes, and app branding.

Reuters reported that SK Hynix is in exploratory talks with Intel to manufacture memory chips in the U.S. for the first time, potentially leasing part of Intel's Ohio facility or forming a joint venture with cloud firms. Intel shares rose 5% and SK Hynix's Nasdaq-listed shares rose 3% on the news, but no decisions have been made and both companies declined to comment.

Mandiant reports an attacker hijacked an active AI coding-assistant session at an unnamed SaaS provider, got the assistant to recommend a poisoned PyPI package, and spread the Shai-Hulud worm across roughly 100 internal repositories, stealing secrets and source code. A second infection occurred after the attacker poisoned a package in the company's own namespace and another employee pulled it. Mandiant recommends verifying AI-recommended dependencies against checksums and allowlists, keeping secrets out of extension reach, and routing dependency traffic through controlled internal repositories.

SK Hynix is in early talks with Intel to manufacture RAM chips in the U.S. for the first time, potentially leasing space at Intel's planned Ohio factory or forming a joint venture involving cloud providers. SK Hynix already has a $3.8B advanced packaging facility under construction in Indiana (mass production by 2029) but currently makes DRAM wafers in South Korea; it's unclear what memory types would be produced in Ohio.

A hacker collective called stegan0gram physically removed a Flock Safety license plate reader, copied its storage, and recovered an on-device encryption key that unlocked thousands of vehicle detection videos. Analysis of the dumped data revealed the camera captured 1.6 million images of 50,000 vehicles in 21 days and that its computer-vision software explicitly detects people, not just vehicles and plates. The hackers are publishing their methods so others can replicate the reverse engineering.

JFrog disclosed a local privilege escalation flaw in Parallels Desktop for Mac (CVE-2026-90894, rated 7.8) that lets any non-admin local account achieve root via a world-writable socket and a tar argument injection in the prl_disp_service. The fix ships only in Parallels Desktop 27, which requires Apple Silicon—meaning Intel Mac users running Parallels 26.4.0 or earlier cannot patch it.

Hang Ten Systems, founded by former Infosys CEO Vishal Sikka just four months ago, expanded its seed round by $53M led by Temasek's Xora, bringing total funding to $85M. The startup advises $10B+ revenue enterprises on AI strategy and software modernization, claiming 'close to zero marginal cost' for software builds and that development focus is shifting from writing code to defining requirements and validating systems.

Fluxnium, a stealth clean tech startup, has emerged with technology developed at U.S. DOE national labs to extract uranium from seawater, where 4 billion metric tons could supply ~50,000 years of nuclear fuel. The company closed a $7M seed led by Congruent Ventures with participation from Constellation Energy, the largest U.S. nuclear fleet operator. Founder Jeff Green is a repeat entrepreneur (Stamps.com, NanoH2O, 1PointFive) betting that uranium supply constraints will intensify as the U.S. aims to triple nuclear capacity by 2050 and tech companies seek nuclear power for AI data centers.

OpenAI is testing Sponsored Agents in ChatGPT Ads, where clicking an ad launches a clearly-labeled conversation with a business-sponsored agent for product Q&A. They are also adding natural-language ad creation via ChatGPT Work, AI creative tools in Ads Manager, and CRM/ecommerce integrations with HubSpot and Shopify. Sponsored Agents are in limited testing with select US advertisers only.

A CNBC Morning Squawk roundup covering a widely expected Federal Reserve rate hike (the first in over three years under Chair Kevin Warsh), the Clarity Act failing in the Senate, and Ford truck pricing, among general market items. The article text is truncated and contains no AI, developer, startup, or Malaysian/SEA tech content.

A Wikipedia article on wax motors—actuators that use thermally expanding wax to produce linear motion, commonly found in appliances like washing machines and dishwashers. The surfaced text contains only Wikipedia navigation boilerplate, not the article body.

AI-driven demand for memory is squeezing smaller device manufacturers, with Fairphone reporting memory now accounts for 60% of materials cost. Smaller laptop and phone makers are redesigning products and testing for counterfeit chips as supply pressures mount.

Claire Vo reviews Meta's Muse personal AI agent after giving it her calendar, email, and family schedule, finding it produced a polished one-shot family morning newsletter PDF that Claude and Codex couldn't match. She highlights Muse's activity feed with task lineage, its permission model, goal-setting, and an animated avatar as standout UX choices, while noting browser-based shopping was inconsistent (failed on New Balance shoes, succeeded on IMAX tickets).

GPT-6 Astra helps Hex’s data agents turn answers into interactive visualizations that employees are proud to share.

OpenAI introduced analytics in the ChatGPT Admin Console that combine usage, cost, task classification, and outcome metrics across ChatGPT Work and Codex. A task classifier groups sampled messages into use cases (e.g., feature development, account research), while breakdowns by model, reasoning, and speed show how credits are spent per task, helping admins target training and optimize model selection.

Chinese state media pushed back against Anthropic CEO Dario Amodei's call to slow AI development, framing the proposal as a competitive maneuver rather than a safety measure. The article itself is mostly navigation boilerplate; the substantive claim is limited to the headline framing.

A phishing kit dubbed N0va is targeting organizations across North America and Europe, impersonating trusted services and abusing legitimate authentication flows to gain valid account access without malware. The article is largely promotional content for ANY.RUN's Threat Intelligence Lookup, highlighting a characteristic URL pattern (url:"/api/verification/init?session=*&flow=*prompt_profile=") for detection. It lists generic consequences of identity compromise: financial fraud, data exposure, and operational disruption.

Best Buy is offering $600 off the Asus ROG Strix G18, an 18-inch gaming laptop with an RTX 5080, 32GB RAM, and a 2TB SSD. The article text itself is almost entirely site boilerplate with no additional technical detail beyond the headline.

Nvidia CEO Jensen Huang stated that China will likely develop its own advanced lithography chipmaking tools by 2030, calling it 'just a matter of time.' The article body contains no further technical detail beyond the headline claim.

SK hynix is reportedly in talks with Intel about US-based memory chip manufacturing, with options including leasing Intel's Ohio plant or forming a joint venture with other AI hyperscalers. The discussions are at an early stage and no deal has been confirmed.

Daniel Gultsch reports that Google Play app review now regularly exceeds one week, with his XMPP client Conversations (an app with 12+ years on the store, monthly update cadence) still pending review a week after submission on September 9. He attributes the backlog to the pipeline being 'clogged with AI slop' and calls on Google to prioritize established apps.

Google patched a high-severity Pixel Cellular Modem privilege escalation flaw (CVE-2026-58704, CVSS 8.0) that shows signs of limited targeted exploitation, alongside 109 other vulnerabilities in the September 2026 Pixel update—46 of them critical-severity across components like BigOcean, Bootloader, IMS, and TEE. The modem bug allows remote adjacent escalation of privilege with no user interaction. Patch level 2026-09-05 or later resolves all issues.

NVIDIA announced two tracks for writing GPU kernels natively in Rust: cuda-oxide (SIMT-style, compiles to PTX via custom rustc backend, requires nightly Rust, early alpha) and cutile-rs (Tile-based, runs on stable Rust 1.89+ with CUDA 13.3, already published on crates.io and used in HuggingFace's Grout inference engine and mistral.rs). Both enforce compile-time memory safety—cuda-oxide via DisjointSlice and launch contracts, cutile-rs via tensor partitioning and ownership.

The article argues that threat intelligence feeds produce signals faster than security teams can validate them, creating a backlog where real exposure accumulates. Attackers are using AI-assisted exploitation to move from leaked credentials or disclosed vulnerabilities to breach faster than defenders can triage. The piece frames threat-led penetration testing (TLPT) as the solution and highlights a Pentera–Recorded Future integration that automatically validates specific threat signals against a live environment.