AI Weekly Malaysia

Article URL: https://github.com/openai/openai-python/blob/main/httpx2.md Comments URL: https://news.ycombinator.com/item?id=49477212

The Hacker News published a conceptual article on Identity Fabric architecture, which connects fragmented identity providers, governance systems, and infrastructure into one observable layer to close the gap between design-time access policy and runtime access behavior. The article frames the problem as 'identity dark matter'—identities, apps, and auth flows outside centralized visibility—and notes the approach is aimed at enterprise hybrid/multi-cloud environments, not smaller single-directory deployments.

CISA's 2024-2025 review found that the majority of vulnerabilities making it to the Known Exploited Vulnerability (KEV) catalog are decades-old flaw classes—SQL injection (CWE-89), XSS (CWE-79), OS command injection (CWE-78), improper input validation (CWE-20), and path traversal (CWE-22). Seven of the top 10 CWEs in both CVE and KEV records match MITRE's 2007 'unforgivable vulnerabilities' list, and three of the top five KEVs stem from these same unfixed holes.

Article URL: https://www.reuters.com/legal/government/us-judge-blocks-pentagons-anthropic-blacklisting-2026-08-28/ Comments URL: https://news.ycombinator.com/item?id=49477055

ServiceNow patched four vulnerabilities on August 27, 2026, including three CVSS 10.0 flaws (CVE-2026-18885, CVE-2026-18886, CVE-2026-74820) that allow unauthenticated attackers to execute arbitrary code and SQL. Hosted instances were automatically updated, but self-hosted customers must manually apply the patches.

Authorities arrested two alleged members of TeamPCP, described as a prolific hacking group. The article text itself was not accessible—only cookie consent boilerplate was captured—so details beyond the headline are unavailable.

X (formerly Twitter) reported busting a 200,000-account Chinese bot farm that included accounts posting claims about AI data center pricing and electricity grid strain, apparently to manipulate public debate around AI infrastructure.

Tom's Hardware reviewed the MSI MPG Ai1600TS PCIE5, a 1600W power supply priced at $500 with Titanium efficiency and a 'GPU Safeguard+' protection feature. The review found the unit technically strong, built on a CWT platform with top-tier components, but notes the $500 cost demands serious consideration.

OpenAI organized an open letter signed by 100+ tech and infosec companies—including Anthropic, Google, Microsoft, Cloudflare, CrowdStrike, AWS, and Oracle—warning that AI-enabled cyberattacks will become 'far more widespread and sophisticated' and that current cybersecurity approaches are failing. The letter proposes more AI as the solution: cheaper models for security at scale, frontier models for harder problems, and government funding for critical infrastructure defense. The Register notes the irony that many signatories built the vulnerable systems and profit from selling the proposed fixes.

The article title indicates Europe is funding launch startups and the Pallas-1 rocket is approaching its debut, but the actual article content was not provided—only cookie consent and privacy policy boilerplate from Ars Technica is present in the source text.

Google is imposing new memory-optimizing rules on Android apps, citing an 'AI memory crisis' as on-device AI features consume increasing RAM. Developers have until February 2027 to comply with the tighter RAM usage requirements.

VulnCheck disclosed two factory-installed backdoors in firmware for routers made by Shenzhen Zhibotong Electronics (ZBT), tracked as CVE-2026-74232 (SPEAKINGSTONE) and CVE-2026-74233 (DARKLANTERN), both rated 9.8 CVSS 3.1. SPEAKINGSTONE beacons to a hardcoded C2 over UDP 10000 and supports root command execution, PPPoE credential exfiltration, DNS hijacking, and reverse SSH tunneling; DARKLANTERN listens on UDP 9992 with a bypassable authentication scheme using a hardcoded salt and all-zero wildcard MAC. VulnCheck found 203 internet-facing DARKLANTERN instances across 22 countries between Aug 18-21, on models including WE1326, WE357, WE5926, WE826-T2, and WG108, traced to an $88 white-labeled unit with 2019 firmware.

Samsung's 2TB 990 Gen 4 SSD is listed at 36% off (nearly $200 off) on Amazon US. The article is primarily a retail deal alert with no technical analysis or broader industry implications.

Intel CFO reports that the 14A process node's defect density is falling faster than internal projections, with performance not seen since the 22nm node. This signals that Intel's most advanced foundry node may be maturing quicker than anticipated, which matters for the competitive landscape against TSMC and Samsung.

Microsoft has delayed the Teams Facilitator's question-detection and answering capability from June to a targeted November release with worldwide GA in mid-December. The feature processes real-time meeting audio to detect knowledge gaps and prompts to answer unanswered questions, but Microsoft hasn't explained the repeated delays. It requires premium Microsoft 365 Copilot and web search enabled to function.

Modders extracted a leaked DLSS 5 build and got it running in Control on early Blackwell hardware. Testing showed an RTX 5070 Ti dropping from 71 to 35 FPS at 4K, suggesting the leaked version is either broken or unoptimized rather than a performance win.

An opinion column by Steven J. Vaughan-Nichols notes that prominent AI boosters—including OpenAI's Sam Altman, Anthropic's Dario Amodei, and Bill Gates—have shifted from optimistic projections to publicly acknowledging safety risks, with Altman admitting model capabilities are outstripping safety work and Amodei warning about pandemic-level virus weaponization. Gates is cited saying current policy puts the world on course for a 'very high chance of a net negative outcome.' The piece is skeptical that measures like OpenAI's ChatGPT for Teens meaningfully address these risks.

SK hynix has broken ground on the first HBM (High Bandwidth Memory) manufacturing plant in the United States, with production targeted to start in 2029. HBM is a critical component for AI accelerators and GPUs.

Xiaomi Malaysia has opened pre-orders for the Redmi Note 17 Series, comprising four mid-range phones including a new top-tier Pro Max model. The Pro Max 5G features a Snapdragon 6 Gen 5 chip, 10,000mAh silicon-carbon battery with 100W charging, IP69K water resistance, and runs HyperOS 3 with Xiaomi HyperAI.

cPanel patched CVE-2026-65643, a critical flaw in domain parking and addon domain functionality that lets any authenticated hosting customer who can add parked/addon domains create arbitrary files and escalate to root, giving full server control. Patched builds are 11.110.0.141, 11.134.0.53, 11.136.0.37, 11.138.0.2, and 11.138.1.7 (WP Squared); servers with automatic daily updates get the fix automatically, or admins can run /scripts/upcp --force.

An Indiana power provider has proposed a $59 million rate cut, crediting data centers and other large customers for driving increased revenue, which could save residential users around $100 annually. The article body is almost entirely boilerplate with no additional technical or policy detail beyond the headline.

Belgian EV startup Any unveiled the LUV1, a modular electric motorcycle with 120 liters of cargo capacity and a 100 km/h top speed, designed by former Pininfarina design director Lowie Vermeersch. Starting at €7,000 (~$8,150), the bike targets a hybrid category Any calls 'life utility vehicles,' with configurable panels for pets, work equipment, or camping gear.

A developer lost 700 GB of their home directory when Claude, running a script to test deletion safeguards, actually executed destructive deletions. Anthropic's safety harness had automatically downgraded the model to Opus 4.8 before a variable collision caused the catastrophic error, suggesting the downgrade may have contributed to the failure.

An IPPR report warns that Big Tech's dominance over UK digital infrastructure risks monopolizing AI, with 79% of UK businesses ranking Big Tech's market power as a bigger growth constraint than access to finance or talent. The report criticizes the UK's Competition and Markets Authority for collapsing ministerial support, appointing former Amazon executive Doug Gurr as chairman, and settling for voluntary commitments instead of binding rules.

At Gamescom, Sony announced it will stop selling game discs by 2028, prompting boycott calls. Digital downloads already accounted for nearly 82% of PS4 and PS5 game sales at the start of 2026, but critics note digital buyers lose resale rights and retailers are negatively impacted.