AI Weekly Malaysia

Apple announced new Mac Mini and Mac Studio models with updated chips aimed at AI workloads. The Mac Mini can now be configured with M6 or M5 Pro chips and starts at $899, up $100 from the prior $799 base. The article notes developers using tools like OpenClaw to build AI agents often prefer running them on a dedicated Mac Mini rather than in the cloud, and Mac Studio is popular among AI researchers training and deploying local models.

China is slowing or restricting shipments of germanium, quartz, and permanent magnets to Taiwan, causing delivery delays and lost orders for Taiwanese manufacturers. China imposed export controls on germanium in 2023 and quartz in late 2024, requiring exporters to disclose end customers and intended use, giving Chinese authorities visibility and control over the supply chain.

Uber is rolling out a live video streaming feature for teen accounts in the U.S., using the driver's selfie camera so parents can monitor rides in real time. The feature has no opt-out for other passengers who may appear on camera, and Uber declined to clarify whether the encryption is end-to-end, leaving open whether Uber itself can access the feed.

Keenable, founded by former Yandex search lead Andrey Styskin and AI scientist Matthias Petri, emerged from stealth with $26M in seed funding led by Accel. The company has built a web search index of 100B+ documents with an API already in production at undisclosed AI labs and inference providers, positioning itself as a cost-efficient web-scale retrieval layer optimized for AI agents rather than human search behavior.

WhatsApp is replacing its 6-digit two-step verification PIN with support for longer alphanumeric passwords with special characters, and now allows users to register multiple passkeys on a single account (useful for people using both iOS and Android). Android users will also see contextual info on calls from unknown numbers, including the caller's country and any shared groups.

Pie, a social app founded by Bonobos' Andy Dunn and backed by Forerunner, Lightspeed, and Accel, launched 'Community Homes' — persistent group homepages with feeds, admin controls, and event planning tools, shifting from a pure events app toward a social network. The app has roughly 300,000 users and plans to add group chats and casual 'hang out' connection bids soon.

Marimo notebooks prior to version 0.23.15 had a code injection flaw (CVE-2026-75149, CVSS 8.7/8.8) where a crafted notebook could supply an attacker-controlled MCP server command through notebook configuration that runs as a local subprocess when the victim opens the notebook in edit mode—before any cell executes. Marimo patched this in 0.23.15 by treating notebook metadata as attacker-controlled and passing config through an allowlist, stripping the ai, mcp, completion, secrets, and server sections. Current PyPI release is 0.24.0.

Forensic teams have documented what appears to be the first confirmed case of civilian deaths caused by a Russian drone operating with fully autonomous AI targeting, powered by an Nvidia Jetson Orin edge-compute module. The incident in Ukraine marks a milestone in the deployment of commercially available AI hardware in autonomous lethal systems.

Fiat Ventures is rebranding to FGV Capital, merging its growth consultancy (Fiat Growth) and venture divisions under one brand while raising a $35M Fund II focused on fintech's intersection with AI, healthcare, and commerce. GPs Marcos Fernandez and Drew Glover say the combined model helps them win cap table spots because founders value access to the advisory network, though the consultancy and fund remain separate entities with processes to prevent investment bias.

A CNBC morning roundup covers Trump administration tariff escalations (50% Canadian auto tariffs by Jan 1 2027), a global sanctions plan targeting Iran, Lego's record revenue, Nvidia's stock losing streak, and Paramount Skydance's Warner Bros. Discovery acquisition facing state-level challenges. No technical product, AI, or developer-tooling details are present.

Asus announced the ROG Xbox Ally X20 handheld gaming device with an OLED screen, available October 15 at $1,299.99 standalone or $2,499.99 as an AR bundle. Pre-orders are open now.

Linux turns 35, having grown from Linus Torvalds' initial 10,000-line project to an estimated 40 million lines of code that now underpins global infrastructure. The article is a retrospective anniversary piece with no new technical announcements.

At Hot Chips 2026, Micron's Raghu Sreeramaneni said HBM now requires roughly 3x the wafer area of DDR5 for equivalent capacity, and this silicon penalty is widening each generation rather than narrowing. This wafer competition is a key driver behind conventional DRAM contract prices surging 90-95% quarter-over-quarter in Q1 2026.

SiFive launched the BigSky SF-2U870, a 2U rack-mount RISC-V development server with 32 P870-D cores at 2 GHz, 256 GB DDR5, dual 7.68 TB NVMe SSDs, and 10/25 Gbps networking, aimed at helping hyperscalers and software vendors port workloads to RISC-V. The fabless designer claims lead customers are already running workloads on deployed systems and that its IP ships in over 500 designs with 10 billion cores to date.

OpenAI's head of core products Thibault Sottiaux discusses ChatGPT Work, a platform packaging coding-agent capabilities for non-technical white-collar workers, included in the $20/month Plus plan. Sottiaux leads API, agent infrastructure, enterprise, all of ChatGPT, and Codex, reporting to Greg Brockman. The interview covers product design philosophy, winning skeptics, and the cost of intelligence.

Fitbit co-founders James Park and Eric Friedman launched Luffu Link, a $250 LTE-enabled health and safety wearable that combines all-day health sensing, voice logging, and emergency contact features without requiring a phone nearby. The device ships in early 2027 and pairs with an AI-powered companion app that organizes family health information, learns daily patterns, and flags notable changes. The target market is family caregivers, independent older adults, and health-conscious adults.

Mirage2FA, a commercial phishing-as-a-service toolkit, has targeted 4,532 organizations globally since 2024 by bypassing Microsoft 365 2FA via session cookie and password theft. ANY.RUN reports that 48% of targeted emails were potentially compromised, with victims concentrated in the US but also spanning Singapore, India, and the UK, heavily impacting the technology and manufacturing sectors.

At Hot Chips 2026, Nvidia detailed its 88-core Vera CPU, the first using its custom Olympus core (replacing the stock Arm design used in Grace). Key specs include spatial multithreading, an LPDDR5X memory subsystem delivering 1.2 TB/s SOCAMM2 bandwidth, and a single-SKU design targeting agentic data center workloads, with a noted deployment at SpaceXAI.

24 npm packages are using unpkg mirrors to host fake Cloudflare CAPTCHA pages for ClickFix phishing. The packages do not infect developers who install them; instead, they use the npm registry as free, trusted hosting for malicious HTML files. The campaign recently switched to using the KeyVal key-value store as a dead drop resolver to evade Google Chrome's Safe Browsing blocklist.

Don't Wordle is a free daily browser game that inverts Wordle's rules: you get six tries but must avoid guessing the hidden word, using color clues to keep as many valid words in play as possible. It includes a limited undo mechanic and stat tracking with shareable results.

Qwen is releasing Qwen3.8-Flash-Next on 2026-08-26 at 15:00 UTC, a 125B-parameter MoE model with 6B active parameters, built on the next-generation Qwen4 architecture. Two variants will be available: the standard model and an FP8-quantized version, both on ModelScope. The team describes this as an early architectural preview ahead of the full Qwen4 model family.

MultiverseComputingCAI introduces Quantization-Aware Healing (QAH), applied to a GPT-OSS 120B model compressed to 60B parameters and quantized to MXFP4. The resulting 4-bit model beats its own bfloat16 original on 7 of 9 benchmarks, inverting the usual tradeoff where quantization degrades reasoning, math, and code generation. The paper critiques standard quantization-aware training (QAT) as costly and unstable, positioning QAD (quantization-aware distillation) as an alternative that avoids re-running expensive post-training pipelines.

Security researchers have documented the first in-the-wild use of FTP server welcome banners as dead drop resolvers to deliver two new RATs called E4del and PINHOLE. E4del is a Node.js-based RAT hidden inside a digitally signed Electron app masquerading as Discord, delivered via a multi-stage chain involving Spanish-language voucher lures, LNK files, WebDAV, and PowerShell.

Microsoft's August 11, 2026 .NET Framework cumulative update broke WPF printing and PDF/XPS generation, causing a System.IO.FileFormatException when content uses certain fonts including Calibri. The bug affects Windows 10, 11, and Windows Server 2012 through 2025. Microsoft's workaround—enabling Switch.MS.Internal.TtfDelta.DisableCmapAndSbitOverflowProtection in app config—disables security protections introduced in the same update, forcing a tradeoff between printing functionality and security.

OpenAI banned a cluster of ChatGPT accounts originating in Russia that were used in a covert influence campaign, discovered after investigating AI-generated social media posts that led to a broader operation. The campaign used a website with misattributed academic work and a 'sovereignty' index favoring Russia, with operators using VPNs to bypass OpenAI's Russia access restrictions. This follows a February incident where OpenAI shut accounts linked to Rybar, a pro-Russia media company described by the UK as partially coordinated by the Russian Presidential Administration.