AI Weekly Malaysia

Attackers compromised around 5,000 Dropbox accounts by abusing a legacy Lenovo login integration: a flaw in Lenovo's email verification let them register Lenovo IDs using victims' email addresses and access the corresponding Dropbox storage without a Dropbox password. The compromise ran from August 4 to 21; Dropbox has since expired all Lenovo-ID sessions and severed the integration, and confirmed none of the affected accounts had 2FA enabled.

A Russian hacker has been extradited and indicted in the US for a phishing campaign that allegedly infected 80,000 PCs and stole victim data via remote access, facing up to 20 years in prison. The article text is almost entirely Tom's Hardware boilerplate with no additional technical detail beyond the headline.

Justin Andersun argues against the romanticized 'Cave' mentality of grinding in private, warning that prolonged isolation lets untested assumptions harden into perceived reality. He draws on his high-school wrestling experience to illustrate how years of effort without external feedback can be mistaken for progress.

Anthropic updated Claude's system prompt (Fable 5.1) to aggressively block reproducing song lyrics, poems, and book passages — including partial quotes, hooks, and line-by-line pasting — and to persistently decline reworded requests within a conversation. The change landed within days of Sony Music Publishing and Warner Chappell suing Anthropic for training on lyric databases. New rules also forbid generating copyrighted characters, logos, and artwork via code (SVG, canvas, CSS, ASCII art).

Manifold Security disclosed eight flaws across seven CLI AI coding agents (Claude Code, Cursor, Codex, goose, Qwen Code, Grok Build, Hermes Agent) where a repository's .git/config can specify a command via core.fsmonitor that Git runs during index refresh — and the agents trigger git status/git diff at startup, executing attacker-controlled code as the user outside the sandbox with no approval prompt. Four agents (Hermes Agent, Qwen Code, Grok Build, and a second Claude Code path) were still unpatched as of September 1, 2026. The attack requires the repo to arrive with its .git directory intact (shared archive, sync folder, USB stick), not via a normal clone.

Adobe acquired India-based marketing intelligence startup Rilo (founded 2025, raised $1M at $10M valuation from PeakXV, DeVC, Day Zero Ventures) in a deal involving IP licensing and a six-person team acquisition. Rilo built custom workflow automation for go-to-market teams—competitor intelligence, content repurposing, sales call analysis—and will shut down post-acquisition. This is Adobe's second India acquisition after Rephrase.ai in 2023, following its $1.9B Semrush acquisition last year.

Trellner Research tested Perplexity's sonar and sonar-pro models across 380 software categories and found 59.8% of 7,534 citations point to domains ranked worse than #100,000 in Tranco, with 23.4% outside the top 1M entirely. Three sites under apparent common control published 215,128 machine-generated 'best <category>' pages between them, two with the HTML title 'Facts & Grounding Page' — explicitly built to be read by retrieval models, not humans. None of the three domains existed before December 2023.

IBM and Confluent have made IBM's time series foundation models (TSFMs) available in Early Access on Confluent Cloud, positioned for forecasting, anomaly detection, and optimization directly on streaming data. The pitch is that a single pre-trained model can generalize to unseen time series without per-stream bespoke modeling, letting non-data-scientists (demand planners, fraud analysts, process engineers) call these as functions rather than build projects around them.

After iXsystems cancelled FreeBSD-based TrueNAS Core in 2024 in favor of Debian-based TrueNAS SCALE, two new community forks—FreeCORE and BSDnas—have emerged on FreeBSD 15. FreeCORE 15.0-U1 appeared August 27, 2026, and supports in-place upgrades from TrueNAS Core 13.3. An earlier fork, zVault, appears to have stalled.

A Chinese-speaking cybercrime cluster dubbed 'Gambling Goblin' has been installing malicious Apache modules on compromised Brazilian government and educational web servers since mid-2025, reverse-proxying visitors to fake app-store phishing pages that push online gambling sites. Check Point Research reports the modules strip security headers and leverage high-reputation .gov.br domains for SEO manipulation. ANY.RUN separately identified 20+ compromised .gov.br portals in a related campaign it calls PhantomEnigma, noting these hosts are part of the delivery chain rather than the primary targets.

The world's largest dark matter detector has detected a single unusual particle event, as reported by Science. The article content itself is mostly site navigation boilerplate, so substantive technical detail is thin in the provided text.

Tape storage vendors shipped 160 exabytes of capacity in 2025, with Q1 2026 capacity shipments rising 57% year-over-year, driven by AI data growth, LTO-9 momentum, and early LTO-10 adoption. The article body is mostly site navigation and membership boilerplate, so technical detail beyond the headline figures is unavailable.

Xiaomi launched the Smart Double Stack Air Fryer 12L in Malaysia at a promo price of RM779 (regular RM899), available from 9 September 2026 via Mi.com, Shopee, Lazada, and TikTok Shop. It stacks two baskets vertically for 12L total capacity while taking ~35% less horizontal counter space than the existing 10L side-by-side model, and can cook up to four dishes simultaneously with a 2,800W output and 14 preset modes.

The title references early DLSS 5 performance explored via community mods and potential 12V-2x6 power connector limits on the RTX 5090, but the provided article text contains only site navigation and boilerplate — no substantive content, benchmarks, or findings are included.

LWN.net is raising subscription prices by approximately 20% effective September 15, 2026, matching cumulative US consumer-price inflation since their last increase in early 2022. New monthly rates are $6 (Starving hacker), $11 (Professional hacker), $19 (Project leader), and $55 (Maniacal supporter). Existing subscriptions stay at the old rate until expiration, and active monthly subscribers get six months at the old rate before the new pricing applies.

Anthropic has hired Matt Clifford, who authored the UK's adopted 'AI Opportunities Action Plan' and chairs the UK research agency ARIA, as managing director of international affairs, leading the company's government dealings outside North America. UK MPs have flagged a 'clear conflict of interest' because Clifford plans to retain his ARIA chair role while working for Anthropic, though he says he will recuse himself from Anthropic-related matters at the agency.

The FBI is investigating a leak of 153 million US and Canadian driver's licenses posted on a Russian cybercrime forum, including the license of US Secretary of Defense Pete Hegseth. The data is suspected to have originated from an ID-authentication service provider, though the specific vendor has not been named.

A BGP hijack diverted Softaculous update traffic between August 28 20:57 UTC and August 30 06:10 UTC, delivering a malicious Virtualizor package to some installations. The update client lacked cryptographic package verification, so it accepted the tampered package; the attacker also obtained a valid Let's Encrypt certificate during the window, meaning no TLS warnings appeared. One hosting provider reported 5 of 34 hypervisors compromised with root-level access via injected cron jobs that added an attacker SSH key and executed a Java payload as root.

Tom's Hardware is promoting a 40% discount on the HyperX CloudX Stinger 2 gaming headset, bringing it to $30 with 50mm drivers. The article is essentially a deal alert with no technical, developer, or startup content.

Norway's digital minister Karianne Tung says the government is considering banning camera-enabled smart glasses and other wearable headsets, citing privacy concerns over devices from Meta and Snap that may soon include facial recognition. Tung plans to convene an expert group to advise on protecting privacy in public spaces, including potentially banning facial recognition of others in public.

Adobe is exposing 70+ tools (Firefly, Photoshop, Premiere, Acrobat, etc.) inside Slack via an MCP app, letting Slackbot call the right Adobe tool based on conversational context. The integration is limited to Slack Business+ and Enterprise+ teams at launch, and follows a similar Adobe-ChatGPT integration last month, with a Gemini integration planned.

Tom's Hardware reviewed the Fractal Define One PC case, which targets quiet operation and GPU cooling. The review text is largely inaccessible due to paywall/navigation content, with only the verdict visible: the case balances quiet, cool, and premium aesthetics.

The article title references a military test where a 20-kilowatt laser was used to destroy three drones, but the page content provided consists entirely of cookie consent and privacy policy boilerplate with no substantive article text.

Tom's Hardware reviewed the Fractal Summit mid-tower PC case, highlighting real wood accents that give a premium feel, particularly on the White Chalk version. Noise-normalized thermal performance was described as not the best, though the full review text is truncated.

Nvidia is pouring billions into optical circuit switching (OCS) to enable next-gen AI clusters packing hundreds to thousands of GPUs per rack, investing $6B across Coherent, Lumentum, and Marvell, plus $125M into iPronics' second-gen OCS tech. Google has already used OCS in its TPU clusters for years, using microscopic mirrors and piezoelectric actuators to reconfigure mesh topologies on the fly.