AI Weekly Malaysia

Companies are used to thinking about attackers as outsiders trying to break in. North Korean IT workers flip that model. They apply for jobs, pass interviews, receive legitimate credentials, and can end up inside the same systems companies spend millions trying to protect. That risk is no longer theoretical. The FBI is now investigating a North Korean remote IT worker who reportedly worked for

Beacon, a CRM provider serving 1,500+ charities, says an AWS access key likely exposed in public JavaScript build artifacts is the leading suspect in a July 27 breach. The attacker copied the entire customer database—including attachments—and probably downloaded it in readable form within 1 hour 27 minutes, despite data being encrypted at rest, because the compromised key allowed decryption. Beacon's logs cannot identify which specific records were exfiltrated.

A critical vulnerability dubbed 'Zoomsday' allowed anyone in a Zoom meeting to take over another participant's entire device. AI-assisted security research reportedly needed only 20 prompts to discover a working exploit potentially affecting hundreds of millions of Zoom users.

Tom's Hardware reviews the 8BitDo Ultimate 2 wireless controller, priced at $57.99, featuring TMR joysticks, dual triggers, adjustable RGB lighting, Nintendo Switch compatibility, and full PC customization. The article body is almost entirely site navigation boilerplate with no substantive review content accessible.

The headline indicates Anthropic is adding an invisible watermark to Claude's AI-generated text, but the extracted article text contains only Ars Technica's cookie consent and privacy policy boilerplate—no substantive reporting is present.

Tom's Hardware highlights a Walmart deal on the 15.6-inch MSI Cyborg 15 laptop with an RTX 5060 GPU, priced at $949 after a $350 discount. The article is primarily a retail deal listing with no technical benchmarks or hands-on review content.

OpenAI announces GPT-5.6, claiming a new price-performance standard for frontier-level agent capabilities. The guide covers practical builder topics: model selection, the Responses API for agent architecture, programmatic tool calling, multi-agent orchestration, and prompt caching.

Intel's CEO invested an additional $12 million of personal funds into Intel, which analysts interpret as a signal of growing confidence in Intel's foundry business. Analysts point to accelerating foundry progress and capital expenditure expansion as positive indicators.

PBS lost access to 50TB of archival data spanning 70 years of TV history after its contracted cloud storage vendor went defunct. PBS is now suing Iron Mountain, the data center hosting the archival materials, to ensure the data is preserved and not lost.

Twitch has added a 'Training for Generative AI' opt-out toggle in channel settings, but it is enabled by default—meaning all channel content (livestreams, VODs, clips, highlights, text, images, and chat messages) is fed into Amazon's generative AI models unless a streamer manually disables it. Twitch CPO Mike Minton openly admitted the default-on choice was because 'if it was opt-in, nobody would opt in,' and confirmed Amazon has already been using Twitch data for AI training since at least 2024. Opting out only covers future model improvements, not data already ingested, and chat messages you post in another streamer's channel are governed by their setting, not yours.

A massive Bitcoin mining data center is proceeding in Alabama despite county and town moratoriums, because a gap in state zoning law overrides local restrictions. The article text itself is mostly site boilerplate with no substantive body content beyond the headline.

Tom's Hardware reviewed the JSAUX FlipGo Horizon Pro, a $399.99 dual-screen 15.6-inch portable monitor with multiple viewing modes and integrated networking functionality. The review calls it versatile but 'master of some,' placing it in a class of its own for portable dual-screen monitors.

OpenAI is previewing an 'Ultrafast' API tier for GPT-5.6 Sol that delivers up to 14× the speed of Standard processing, generating up to 750 output tokens per second. The service is powered by Cerebras inference hardware, marking a notable infrastructure partnership for OpenAI. It launches first via the OpenAI API.

Elon Musk claims xAI will scale its data center capacity 7x to 10 gigawatts by 2027, with a revenue target of up to $500 billion by end of next year. The article contains no technical detail, independent verification, or breakdown of how this capacity would be built or financed.

Cerebras shares fell nearly 20% after missing earnings expectations, with hardware sales declining even as its AI cloud revenue surged 281%. The divergence signals that demand for Cerebras's wafer-scale inference/cloud offering is growing faster than its chip-selling business.

PCIe 6.0 SSDs are finally reaching the market years after the spec was ratified in early 2022, with Micron shipping the first PCIe 6 SSD in mid-2025 and Samsung catching up in July 2026. Independent controller makers Marvell, Phison, and Silicon Motion are now preparing their own PCIe 6 SSD platforms as Gen6 platforms approach commercial availability.

Tickets are now open for the F1 Gulf Air Bahrain Grand Prix held at Sepang International Circuit from 2–4 October 2026, with MyKad holders paying from RM200 (G Hillstand) up to RM2,083.40 (Main Grandstand) for 3-day access. Payment is processed in Bahraini Dinar at checkout, subject to FX rates, and non-Malaysians pay USD 218.90–566.06.

A Wendy's digital menu board in Vancouver displayed a Windows Phone Link (PhoneExperienceHost.exe) error instead of its pickle chicken sandwich ad, likely due to a stack memory issue. The Register's offbeat column notes the irony of a consumer-facing display running Windows with Phone Link enabled at all.

Annalakshmi, a vegetarian restaurant in Singapore founded in 1986, has operated a pay-as-you-wish model since 2001, surviving 25 years in a high-cost F&B market by relying on a network of volunteers, donors, and loyal customers who pay more to subsidise those who pay less. The concept originates from founder Swami Shantanand Saraswathi's experience of receiving a free meal at a temple in Varanasi.

Grab is quietly testing a Women-Only Rides (Beta) feature in Malaysia, matching female passengers exclusively with female driver-partners. It requires Advance Booking with a minimum 75-minute lead time, is restricted to city rides (no KLIA or intercity), and is available in Klang Valley, Johor, and Penang per the app. Access requires a one-time identity verification (MyKad or passport plus selfie), cross-referenced against official records, with approval taking up to three working days.

SK Hynix is investing $720 billion to build the world's largest network of memory factories at its Yongin Cluster, with production starting in February. The company now controls 58% of the high-bandwidth memory (HBM) market and its market cap has topped $1 trillion after a fivefold jump in the past year. South Korea's president is pushing both SK Hynix and Samsung to expand capacity under a national plan backed by at least $22 billion in chip support.

OpenAI appointed Dali Rajic as Chief Revenue Officer, replacing Denise Dresser who is departing after a transition period. Rajic was most recently President and COO of Wiz (recently acquired by Google), and previously held senior revenue/COO roles at Zscaler and AppDynamics. OpenAI claims its products now reach over one billion weekly active users and more than two million businesses, twice as many as a year ago.

A vibe-coded, open-source app adds a 3D video rental storefront interface to Jellyfin home theater PCs, recreating the nostalgic experience of browsing VHS tapes in a rental store. The project is self-hosted and targets Jellyfin users who want a retro-styled browsing experience for their media libraries.

This is a sponsored Grab post explaining how users can redeem accumulated GrabCoins balances for discounts on GrabCar, GrabFood, Grab PayLater, Grab Dine Out, and Jaya Grocer vouchers. It walks through checking your balance via the GrabCoins icon and redeeming offers from the in-app catalogue.

A contractor hired by Pageloot (a QR code marketing company) stored staging server credentials in a Google Doc set to 'anyone with the link,' which Google then indexed so the hostname and credential string appeared in search autocomplete. Pageloot co-founder Siim Kostabi says an employee discovered the leak while debugging something unrelated by typing their domain into Google Search. The company cut the contractor's access, rotated all exposed credentials, and banned storing passwords on Google Docs, Slack, Notion, or similar collaboration tools.