AI Weekly Malaysia

An Ars Technica piece dated 2026-09-30 headlines that RFK Jr. claims AI backs his anti-vaccine views, and that Ars checked the claim and found it does not. However, the retrieved page content is almost entirely Conde Nast cookie-consent and privacy-opt-out boilerplate, so no specific prompts, model names, outputs, or methodology are available in this text.

A Defense Manpower Data Center (DMDC) breach notification shared on Reddit says unauthorized users exploited a vulnerability in an unspecified file-sharing system over roughly nine months, from October 2025 to mid-July 2026, exposing unencrypted personnel records. CNN and Federal News Network report a Pentagon official put the count at about 2.8 million living people plus nearly 300,000 deceased, with Social Security numbers, names, dates of birth, sex, race, and military service details exposed. DMDC holds over 60 million records and acts as the military's identity management provider linking people to smart cards and passwords for Pentagon systems and bases.

On September 30, 2026, the source code for EDG's C++ front end went public, with The C++ Alliance — fiscal sponsor of Boost since 2024 and employer of LLVM/Clang front-end committers — taking over as its nonprofit steward. Development now runs on three tracks: community pull requests reviewed initially by experienced EDG developers, immediate bug-fix maintenance by Alliance engineers, and collectively funded features where organizations pay for a feature that is then released to everyone at once with no early access. The transition page frames this as a change of steward, not a change of course, for a 30-year-old source-to-source engine.

The supplied extract contains no article body — only Ars Technica's cookie-consent and privacy-center boilerplate (essential, social, targeted, performance, functional, and audience-measurement categories). Despite the headline about Disney protests and streaming-merger risk, there is no reporting, quote, number, or date in the text to summarize. The only verifiable metadata is the title, URL, source, category, and a published timestamp of 2026-09-30.

At its Dash Forward 2026 event, DoorDash unveiled a six-propeller delivery drone and formally named the service DoorDash Air, built by the DoorDash Labs team that previously made the Dot sidewalk delivery bot. DoorDash says it designed the system backwards from ground operations — loading, kitchen handoff, packaging — and runs all human, bot, and drone deliveries through one coordination layer called the Autonomous Delivery Platform (ADP), which routes orders using weather, flight range, and ground traffic to decide which orders are worth flying. The company received FAA Part 135 air carrier certification in July and says it sized the whole system around 13 years of order data covering more than 500,000 marketplace restaurants; Harrison Shih, who heads DoorDash Air, said they 'started with what people order' rather than with the aircraft.

BMW's 2027 3 Series now comes in directly comparable gas and electric versions, and the EV undercuts the gas model: the electric i3 50 xDrive is $61,500 versus $65,900 for the gas M350 xDrive — a $4,400 (6.7%) gap, before destination charges. BMW also sells a cheaper gas 330 at $49,900 ($51,900 for xDrive) with no electric equivalent yet, and the two comparable cars sit on different platforms, with the i3 on BMW's newest chassis. Range is close: 468 miles for the i3 with 208 miles of charge added in 10 minutes, versus roughly 450 miles per tank for the gas AWD model.

Quanta Magazine reports that traveling waves of electrical activity across the cortex are more structured than the simple planar oscillations neuroscientists traditionally assumed — including source waves emanating from a point, sink waves converging on one, and vortex-like spiral waves. A study published in April 2026 in Nature Communications, from a team including Joshua Jacobs and Anup Das at the University of Chicago, measured these patterns with intracranial electrodes and found different behavioral tasks produced distinct wave patterns; Earl K. Miller, a cognitive neuroscientist at MIT, is quoted saying the work has moved the field from 'Are they relevant?' to calling traveling waves 'a major motif of how the cortex processes information.' The piece also notes the brain spends roughly half its energetic resources maintaining the electrochemical gradients that keep neurons ready to fire.

At OpenAI's Dev Day, Sam Altman revealed a limited-preview "Decisions API" that gives the Luna model a predefined set of options to pick between — image categories, agent behaviors — and returns that choice fast. It looks like a clone of Jev, a model released earlier in September by TypeSafe AI that acts as an LLM-based classifier outputting probabilities over a fixed choice set cheaply and at high speed. TypeSafe CEO Diogo Almeida joked on X about "clone wars" and said OpenAI's interest could signal that building in a "System One" (fast, intuitive) way is the future; TechCrunch notes it's unclear how close the two products are, and hasn't yet spotted developers using Decisions API.

A photo essay by Marcin Wichary (a designer who has worked at Google, Medium and Figma and wrote a book about keyboards) collecting modular industrial dashboards he saw in German and Polish museums — including an air traffic control display at the Deutsches Museum in Munich and subway/light-rail monitoring panels at Fernmeldemuseum Stuttgart. The panels are built from pluggable modules with buttons and lamps that light up to show status, and Wichary openly states he doesn't know much about them and invites readers to write in with details. The post carries no measurements, schematics, part numbers, or dates — it is images plus commentary.

The fetched page contains only Condé Nast cookie-consent boilerplate — no article body, quotes, dates, agency names, or policy specifics. The headline asserts that a Trump administration plan for combating AI risks depends on Big Tech policing itself, but nothing in the supplied text supports that claim. There is no verifiable detail here to summarize.

Ars Technica reports that a nonprofit is suing OpenAI over a hack involving Hugging Face, arguing that "an AI did it" is no defense and demanding the company halt what the suit calls unsafe development. The published article body available here contains only cookie-consent and privacy boilerplate, so there are no details on the court, filing date, damages sought, the specific model or agent involved, or how the Hugging Face breach occurred.

ElevenLabs is letting employees sell vested shares in a $300 million tender offer at a $22 billion valuation, double the $11 billion it hit when it raised $500 million in February 2026. The deal was co-led by Wellington and T. Rowe Price, and it's the four-year-old company's second employee secondary — the first was a $100 million tender at a $6.6 billion valuation in September 2025. ElevenLabs, founded in 2022 and described as New York- and London-based, makes voice and sound-effect generation models.

Netlify rebuilt its Edge Functions platform, moving off a hosted V8-isolate execution service to Firecracker MicroVMs running inside its own edge network, in work done with Unikraft. Warm invocation p50 latency dropped from 25–40ms to ~5–6ms, p99 improved 47.4%, edge function log delivery got 5x faster, and Netlify reports 99.998% availability across roughly a billion Edge Functions per day. Cold invocations still occur on about 1.2% of requests (~9ms average to fetch images), and the authoring model is unchanged: URL imports, npm packages, Node built-ins, netlify.toml declarations, and local dev all work as before.

A Tom's Hardware item reports that Geekbench 7 results suggest OpenAI's 'dots' agent runs on nine-core AMD EPYC VMs with nearly 10GB of memory, and that its newest runs score roughly six times Meta Muse in multi-core. The provided text is almost entirely page navigation and subscription prompts, so the nine-core EPYC config, the ~10GB memory figure, and the 6x multi-core comparison against Meta Muse are the only concrete claims available. There is no detail on dates, pricing, model version, or methodology beyond that.

Reddit announced it is winding down RSS feeds, with support ending November 13, 2026, and will shut down public API access in March 2027. Reddit says RSS had become a "common surface for large-scale scraping and automated abuse," and points moderators toward the Discord Relay Devvit app as a migration path, while stating there is no direct replacement for RSS consumption. The move lands as Reddit's non-advertising "other revenue" grew 24% year-over-year to $43 million in Q2, largely on AI data licensing deals.

Tom's Hardware published a headline item reporting that executives at Nvidia, Anthropic, OpenAI and other AI labs pledged that AI companies will 'self-police' AI development and 'take steps to build a positive future.' The captured page text contains only site navigation, membership prompts and newsletter boilerplate — no names, no pledge text, no date, no signatory list, no enforcement mechanism. Nothing concrete beyond the headline claim is available in this source.

TechCrunch's Russell Brandom argues consumer AI is being re-rated by the market even as it looks like it's returning: Meta's Muse assistant (with its Jolly mascot) has been a surprise hit, OpenAI shipped Dots the day before, and the errand-running assistant Instinct hit a $10 billion valuation. The counterweight is economics — a16z's semiannual State of Markets report, drawing on a summer PNC research report, charts slowly growing consumer AI adoption and spend, with 2.2% of consumers paying for AI services as of May. Brandom notes frontier labs have shifted toward the Anthropic-style enterprise-contract and vertical expansion model, and that products like Muse and Instinct are less concerned with monetization for now.

Tom's Hardware reports that Marvel's Wolverine has reached in-game gameplay on KytyPS5, an emulator project, joining Ghost of Yotei as PS5 exclusives that now boot to gameplay — with performance still measured in single-digit frames per second. The visible article text is almost entirely Tom's Hardware membership and newsletter boilerplate, so it carries no version numbers, hardware specs, commit details, or build instructions.

The supplied text contains no article content — only Ars Technica's cookie consent and privacy notice boilerplate (GDPR opt-out language, social media, essential, targeted, performance, functional, and audience measurement cookie descriptions). No details about Russia's crewed spacecraft program, its delays, timeline, hardware, or funding appear anywhere in the excerpt. The headline promises a status update on a long-delayed crewed spacecraft, but nothing in the provided text supports summarizing it.

Microsoft Security Research documented exploitation of CVE-2026-73570 (CVSS 8.9), an unauthenticated OS command injection in Zimbra Collaboration Suite that is triggerable via a crafted SMTP request, but only when SNMP notifications are enabled and the optional zimbra-snmp package is installed. Post-exploitation activity between July 20 and August 13, 2026 included JSP web shells, reverse shells, privilege escalation, memory-backed execution, and collection of email, authentication and mailbox data. Zimbra patched the flaw in version 10.1.20 in July 2026; CERT Polska flagged active exploitation in August 2026 and CISA added it to the KEV catalog with an August 24, 2026 federal remediation deadline.

Xbox's Disc to Digital feature is rolling out to all Xbox players, letting them play disc-based games without the disc. Selling the original physical media revokes access to the digital version. The report frames this as a hybrid physical-media plan while Sony is phasing out discs by 2028.

Microsoft Security Research reported a phishing campaign, detected in July 2026, that delivers a digitally signed MSP360 RMM v2.5.0.67 installer disguised as meeting invites, PDF readers, software updates, and e-card/RSVP lures (e.g. VIP_ECARD_INVITATION_rmm_v2.5.0.67_oid[redacted].exe, SSA.GOV_STATEMENT_rmm_v2.5.0.67_oid[redacted].exe). The installer relaunches itself through the Windows UAC elevation flow, drops DLLs, registers RMM.Agent.exe and RMM.Agent.Launcher.exe as Windows services with Registry autorun entries, and opens inbound UDP port 48678 in Windows Firewall. It then uses MSP360 to run PowerShell that installs a ConnectWise ScreenConnect client as a second, redundant remote-access channel for tool delivery and credential access. Payloads were staged on both attacker infrastructure and legitimate services including Amazon S3, Cloudflare R2, Dropbox, GitLab, and Supabase. Microsoft did not attribute the activity to any known threat actor.

Meta is disputing an Inc. column by Jason Aten claiming that its AI agent Muse read a user's private messages without permission. Meta VP of Communications Andy Stone said on X that the Messages integration in the Muse app for Mac is 'entirely opt-in,' requiring users to enable both Full Disk Access and the Messages connector, while Meta Superintelligence Labs executive David Singleton described on Threads a flow of 'three separate steps of application-level permissions' plus macOS system-level protections. The pushback lands days after a New Mexico jury found Meta had misled users about its data practices in a case stemming from the 2018 Cambridge Analytica breach, and while the Muse app sits at No. 1 on the App Store.

Tom's Hardware reports a new PS5 'Relapse' jailbreak that unlocks firmware 13.60, enabling homebrew and Switch emulation on the console. The headline states it is hamstrung because newer PS5 games already require firmware 14.00, leaving the exploit on an outdated firmware branch. The supplied page text is almost entirely Tom's Hardware navigation and subscription boilerplate, so there are no technical details on the exploit chain, release date, or tooling beyond the headline claims.

The headline claims Google is paying roughly 100 websites for contributions to its AI Overviews answers, but that the amounts paid are tiny and the programme is described as struggling. The retrieved article text, however, contains only cookie-consent boilerplate — no payout figures, no named publishers, no dates, and no Google statement are actually present in the source. Treat the details as unverified until the full piece is read.