AI Weekly Malaysia

The supplied page contains only Ars Technica's cookie and privacy consent boilerplate — no article body. Beyond the headline ('Switch 2 security takes a hit as hackers unlock homebrew access') and the publication timestamp of 2026-10-22, there are no details on the exploit chain, firmware version affected, what homebrew or mod support was achieved, or whether Nintendo has responded.

Microsoft and Hugging Face describe ThinkingBox, a system that grades an agent by comparing the final database state against the expected outcome, across 507 tasks in ThinkingBox-Bench. They reused those 1/0 executable checks as GRPO reward signals on a separate training pool, filtered by 'offline policy-relative difficulty' — estimating each task's success probability with the base policy once, then keeping the pool fixed. After 50 GRPO steps on Qwen3.8-27B, average success across 10,140 attempts rose from 51.70% to 60.78%, and tasks passing all 20 attempts rose from 38 to 107; ThinkingBox-Training is now on GitHub.

In a Wednesday filing released alongside Meta's Q3 earnings, Meta disclosed a new stock incentive plan under which CEO Mark Zuckerberg commits to staying in California for at least eight years, explicitly framed as offsetting the burden of higher taxes if Proposition 40 — California's billionaires tax — passes on Election Day, Nov. 3. The article notes Zuckerberg is the sixth-richest person in the world and, with Nvidia's Jensen Huang, one of only two centibillionaire tech CEOs still living in California, while Elon Musk and Michael Dell are in Texas and Jeff Bezos' primary residence is elsewhere.

Ars Technica's headline reports that Moderna and Merck say their personalized mRNA cancer vaccine cut death and recurrence by 42% in melanoma. The retrieved page body contains only the site's cookie-consent and privacy boilerplate — no trial size, endpoint definitions, follow-up duration, comparator details, or peer-review status — so the 42% figure cannot be checked from this text.

OpenAI is reportedly raising up to $30B at a $1.25T pre-money valuation, led by Coatue and UAE investors, ahead of a planned IPO. That follows a March round at $852B post-money and confidential IPO paperwork filed in June; CNBC says the UAE funding may be tied to securing more computing capacity for OpenAI. Anthropic is separately reported to be targeting a $1.5T–$2T valuation for its IPO after raising $65B at a $965B valuation in May.

Elon Musk has committed roughly $366 million to the 2026 midterm election, with much of it aimed at preserving or expanding Republican power in Washington. SpaceX has at least $6.78 billion in federal work through Oct. 1, 2026 — nearly twice its total for all of 2024 — and several Musk-backed races could affect oversight, federal contracts, or regulations involving SpaceX, Tesla, and Musk's AI business. Texas is a key overlap, with Tesla, SpaceX, and the planned Terafab chip project.

The article body is not usable: the fetched text is Ars Technica's cookie-consent and privacy-center boilerplate, not the story. All that survives is the headline claim that the latest estimate for Starship launches needed to support a Moon landing is 22 — no sourcing, date of the estimate, payload assumptions, or comparison to prior figures is present in the text.

A Vanity Fair excerpt from Matthew Cole's book "Princes and Thieves" claims the Dutch military intelligence service (MIVD) accessed Jared Kushner's iPhone and monitored him using a Dubai-based bank account holding hundreds of millions of dollars routed from an Azerbaijani bank, with transfers to a warlord, a mercenary and a one-time hit man — more than $700 million in transfers. The alleged access chain: the Dutch turned a GRU operative specialising in stolen bank data who was travelling to the UK, and he gave them access to a Rostov-based GRU server where they found screenshots of Kushner's iPhone. The excerpt, as supplied, stops before describing how the phone itself was penetrated.

The supplied page text is almost entirely a cookie-consent notice, so the only substantive claim available is the headline: Comcast lost more subscribers and reportedly described rival ISPs' low prices as "irrational." No subscriber counts, pricing figures, dates, quotes, or market details appear in the extract.

Rivian acquired Third Dimension, a U.K. startup founded in 2024 by Tolga Kart and Piotr Sokólski that turns images and video into lifelike 3D worlds, originally for game development. The 15-person team, most based in the U.K., joins Rivian's autonomy and AI team under James Philbin and will focus solely on automated driving, supporting Rivian's driver-assistance features and the self-driving system for robotaxis it plans to supply to Uber. Third Dimension had raised $7 million in seed funding from Abstract Ventures, MVP, Soma Capital and Solari Capital; deal terms were not disclosed.

OpenAI is close to finalizing an up to $30 billion funding round at a $1.25 trillion pre-money valuation, with UAE investors and Coatue leading, according to unnamed sources. OpenAI told investors it aims to secure signatures by the end of next week; the round is being framed as an opportunistic bridge before a potential IPO, which CFO Sarah Friar has said will likely come in 2027.

The supplied text contains no article body — only Ars Technica's cookie-consent and privacy-center boilerplate — so the incident itself cannot be summarised from this source. The headline asserts that eMudhra is exiting the TLS certificate business after using a customer's certificate private key, but the excerpt gives no numbers, dates, affected customers, or remediation details to verify that claim.

Meta shares fell about 6% after Q3 earnings showed negative free cash flow of $2.12 billion, and the company raised the floor of its full-year capex guidance to $135B–$145B from a prior $130B–$145B. The spread on Meta's five-year credit default swaps hit an all-time high, a signal of investor credit concerns over its AI spending, and Meta also disclosed a new nonvoting Class C common stock to preserve its founder-led structure.

The Browser Company is shutting down Arc on December 22, 2026, and pushing users to its AI-first browser Dia. New Arc accounts are already blocked; on November 23 Arc Search on iOS and Android loses AI features like “Browse for Me” and sign-in/sync, and on December 22 Arc stops working on Mac and Windows, accounts are deactivated, and personal data is deleted within 30 days. The company says browser security costs are rising, while open-sourcing Arc is blocked because it depends on the proprietary Arc Development Kit that also powers Dia.

At TechCrunch Disrupt, Lovable GTM lead Luke Arno, Polsia's Ben Broca, and Theory Ventures' Tomasz Tunguz discussed the first 90 days after a startup launches a sellable product. Arno said founders should not treat early fast revenue as proof they are ready to scale: if 10 customers arrive through 10 different motions solving 10 different problems, there is no repeatable go-to-market; three customers acquired through a similar motion for a similar problem gives more confidence. Broca said product-market fit is especially hard now because products can be copied easily.

The supplied page contains only Ars Technica's consent-management boilerplate (targeted-advertising opt-out text, cookie toggles, and privacy contact details) and no article body. There is no trailer description, no release date, no platform list, and no Mass Effect: Universe detail to report. The only verifiable facts are the headline and the 2026-10-22 timestamp.

Simon Willison's link blog post points to Dutch alternative rock band De Staat's 'FREEDOM' music video, flagging a moment at 00:44 that he calls a first for him, with visual effects credited to Matties Grooten of Fake it or Leave it. The post itself is one sentence plus a credit line — it never states what actually appears at 00:44, so the specific detail readers are meant to notice is not in the text. It carries his 'pelican-riding-a-bicycle' tag, but the excerpt does not explain that connection either.

The supplied text contains no article content: it is Ars Technica/Conde Nast cookie-consent and privacy-opt-out boilerplate. The only usable information is the headline and metadata, which say the 2026 Nikon Small World photomicrography contest winner was a video/still of ink droplets in motion, published 2026-10-22. No names, techniques, equipment, prize details, or quotes are present.

1Password launched 1Password for Agents on Thursday, a system where an AI agent sends a unique digital key to 1Password to prove its identity, the user gets an alert and confirms the login, and 1Password then fills the credentials on the agent's behalf so the agent never sees the password. The launch lists support for Claude Duet from Anthropic, OpenAI's Dots or ChatGPT Work, Grok Bot, Meta's Muse, and agents from startup Town, with more integrations said to be coming. It landed the same day Axios reported that U.S. banks have begun detecting agentic activity inside user accounts.

This is a webinar promotion on The Hacker News, published 22 Oct 2026, headlined 'The AI Agent Nobody Owns' and framing AI agents as an 'insider threat' to enterprises. The supplied text is almost entirely site navigation and boilerplate — it names no vendor, no speaker, no webinar date, and contains no research findings, incident data, or technical detail about how such agents are exploited or detected.

The Hacker News headline reports that Arista warned about a critical SQL injection zero-day in VeloCloud that is being exploited in attacks. The provided article text contains only the headline and site navigation, with no affected versions, patch guidance, indicators of compromise, or exploitation details. There is not enough concrete information here to summarize the vulnerability accurately.

The extracted page contains only Ars Technica's Condé Nast consent and cookie-preference boilerplate — no article body, quotes, names, dates, or specifics beyond the headline. All that is verifiable from the supplied text is that a figure described as a "MAHA leader" reportedly quit over the Trump administration's food agenda, with a published timestamp of 2026-10-22. Nothing about the substance of the resignation, the policy dispute, or the sourcing is present.

The fetched page contains only Ars Technica's Condé Nast consent-management boilerplate — cookie toggles, state-level opt-out language, and privacy contact details — with no article body. The only substantive information available is the headline and URL: BMW is reportedly offering the 2027 X5 and iX5 with both combustion and electric powertrain options. No specs, pricing, range figures, launch dates, or platform details are present in the supplied text.

OpenAI has made the Decisions API generally available, built on GPT-6 Luna for bounded-answer decisions from text, images, and structured inputs, claiming up to 10x faster performance than GPT-6 Luna through the Responses API. Since beta it added GPT-Live integration, prompt caching, US/EU inference residency, native JSON and image inputs, and up to 400 questions per request, twice the previous limit. Customer examples cite roughly 5x faster route selection at Box on 30 certificate-of-insurance cases and 40x faster p95 for scoring agent-generated shell commands with comparable accuracy.

OpenAI has made its Decisions API generally available to all customers, a fast, cheap 'super classifier' model that picks among options and returns a confidence rating rather than generating text. It is positioned against TypeSafe's Jev model, which created the category and helped make TypeSafe a $7.6 billion company. OpenAI's Nikunj Handa says the team reconfigured ChatGPT Luna rather than building a purpose-calibrated decision model, cutting inference from 1-3 seconds to 100-180 milliseconds; the API was announced at OpenAI's September 29 developer day, gained voice and visual modalities in the public version, and inference is now geographically targeted for lower latency, with Box, Datadog, Ramp and Speak as early users.