AI Weekly Malaysia

Researchers from Belgian and German academic institutions demonstrated at the 35th Usenix Security Symposium that commercial out-of-order RISC-V processors—specifically SiFive P550 and T-Head Xuantie C910/C920—are vulnerable to all major Spectre variants (PHT, BTB, RSB, STL), achieving up to 100% recall and 97%+ precision in proof-of-concept attacks. In-order RISC-V processors (SiFive U74, Xuantie C906, C908) appear unaffected.

The article content was not captured — only cookie consent boilerplate from Ars Technica is present. No substantive details about drone surveillance or screwworms are available in the provided text.

Nvidia announced NeMo Switchyard, a software proxy that routes inference requests to different models based on cost, latency, or quality, claiming a 74% cost reduction versus using Claude Opus 4.8 alone with roughly a six-point accuracy tradeoff. Alongside it, Nvidia released Nemotron 3.5-30B-A3B-Lightning, a 30B-parameter MoE open-weights model for low-latency general use, and Nemotron Parse, a 1B-parameter model specialized in extracting context from PDFs including charts and tables.

The FTC is distributing $23.8 million to 640,038 Grubhub drivers and customers after a December 2024 lawsuit alleging misleading driver earnings claims, customer account restrictions, and listing ~325,000 restaurants on the platform without consent. Grubhub must now obtain restaurant consent before listing, accurately advertise driver earnings, and give customers a way to challenge account freezes.

Article URL: https://zed.dev/blog/introducing-delta Comments URL: https://news.ycombinator.com/item?id=49276574 Points: 671 # Comments: 254

Cognition, maker of the AI coding agent Devin, is reportedly in talks to raise at a $40B valuation, up from $26B just three months ago. The new valuation hinges on reaching a $1B annualized revenue run rate, double the $492M ARR it reported in May, with enterprise usage growing 50% month-over-month. Customers include Mercedes-Benz, NASA, and Goldman Sachs, with Devin primarily used for long-tail grunt work like legacy modernization and platform migrations.

A hacker known as Nightmare Eclipse published ShieldBreak, the 10th Windows zero-day in their campaign against Microsoft, a local privilege-escalation exploit that gains SYSTEM privileges on fully patched Windows 10, Windows 11, and Windows Server 2025. Former Microsoft employee Kevin Beaumont confirmed it works on the latest Windows 11 and published three detection and hunting queries. The exploit bypasses Microsoft's July fix for CVE-2026-50656 (RoguePlanet) but operates differently, abusing Defender's cloud-hydration scan via the Cloud Filter API.

At the Ai4 conference in Las Vegas, Geoffrey Hinton, Fei-Fei Li, and Andrew Ng argued against letting a handful of major AI labs control access to AI, though they disagreed on tactics. Ng pushed for openness and multiple competing providers to prevent gatekeeping; Hinton drew a sharp distinction between open-source software (code inspectable) and open-weight models (trained parameters released), expressing concern about the latter's lack of control.

Thrive Holdings, a Thrive Capital spinout that buys traditional businesses and implements AI into their workflows, raised $2B at a $12B valuation from SoftBank, D1 Capital, and Altimeter. OpenAI took an ownership stake in December 2025 and sends employees to embed with Thrive's 70+ portfolio companies. Thrive's accounting arm (Current) reports its TaxAI agents processed 7,000+ tax returns at 98% accuracy and cut prep time by 30%, while its IT arm (Shield) claims 36x faster help desk resolution and doubled custom AI agent deployments in the last month.

North Korea's Lazarus Group exploited CVE-2026-68820, a Windows AFD.sys privilege escalation flaw (CVSS 7.0) patched in August 2026 Patch Tuesday, to deploy a new backdoor called Troy against defense and aerospace companies in France, Germany, Brazil, and India. The campaign used fake LinkedIn recruiter messages and trojanized PDF viewers to deliver malware via DLL side-loading, with C2 communication through Microsoft Graph API and OneDrive.

A hacking and extortion group called Helix claims to have breached Uber Freight, exfiltrating mailboxes, cloud storage, accounts payable files, and dispatch documents dated around mid-June. Uber Freight says operations are unaffected and has not confirmed the breach. Google tracks Helix under the umbrella UNC6671 and reports the group has made at least $10.6 million in ransom payments between January and May 2026, primarily using voice phishing against IT helpdesks to reset employee passwords.

JCB set a new land speed record of 406 mph for hydrogen-powered cars using two hydrogen-burning internal combustion engines. The article text was not captured beyond cookie consent boilerplate, so technical details about the engines, vehicle, or run conditions are unavailable.

Oracle is reportedly planning another round of layoffs after already eliminating 21,000 full-time positions and spending most of its $2.1 billion restructuring budget. Some teams face double-digit percentage cuts, though the report does not specify which product lines or geographies are affected.

Automattic's personal CRM Mesh launched on Android with platform-specific features including split-screen views, foldable keyboard shortcuts, Material You widgets, and real-time sync. Mesh's Nexus AI is in early access, letting users query their network (e.g., who they know at a company or in a city), with plans to deepen integration with Automattic's cross-platform messaging app Beeper and add more AI relationship-management features.

Gregory Kurtzer, founder of CentOS and Rocky Linux, has launched OpenWALDO—a project to build a shared, open-source AI training dataset with full provenance and a bill of materials. Funded by his AI infrastructure company CIQ, the effort currently targets 167 billion transparent tokens, a fraction of the trillions used by major AI labs. The project argues that even 'open-weight' models hide their training data, creating legal and compliance risk for downstream users.

Article URL: https://artificialanalysis.ai/articles/grok-4-6-benchmarks-and-analysis Comments URL: https://news.ycombinator.com/item?id=49275385 Points: 340 # Comments: 410

Article URL: https://en.andros.dev/blog/ef4968f5/html-over-websockets-real-time-spas-with-barely-any-javascript/ Comments URL: https://news.ycombinator.com/item?id=49275335 Points: 252 # Comments: 196

Sandbar, the startup behind the voice-capture ring Stream, has raised $36M including a $23M Series A led by Adjacent and Kindred Ventures. CEO Mina Fahmi argues prior AI wearable hardware failed because it didn't keep the human in control, and bets that voice-first capture of stray thoughts is the winning form factor.

CNBC's Jim Cramer highlighted benign July CPI data and strong earnings from AI cloud providers CoreWeave (shares +19%) and Nebius (shares +27%), driven by massive demand for AI cloud computing. The piece is investor commentary tying macro inflation data to AI infrastructure stock performance, with mentions of Nvidia, Intel, and Micron as related plays.

The article title indicates the US federal government is attempting to override New York state gambling laws and has ordered prediction-market platform Kalshi to continue operating. However, the provided article text contains only cookie consent boilerplate and no substantive article content.

Tesla has filed documents with the state of Texas to build a $10.1 billion solar panel factory called Project Crystal Sun, 45 minutes southwest of Houston, aiming to break ground this year and complete by 2028, with first panels in 2029. Tesla has applied for tax incentives, estimating $1.1 billion in property tax liability over 37 years without them, and says it is also exploring sites in other U.S. states. The factory would create about 9,700 full-time jobs.

Form Energy raised $750M to scale manufacturing of its iron-air batteries in West Virginia, which can discharge for up to 100 hours versus the few hours typical of most grid storage. Google is buying a 30GWh Form battery for ~$1B to power a Minnesota data center, and Crusoe ordered 12GWh, driven by AI data centers expected to quadruple U.S. electricity use by 2035. The batteries use iron instead of lithium/cobalt/nickel, with 80% of materials sourced from the U.S. to reduce China dependence.

OlmoEarth Studio now allows users to compute and export custom embedding vectors from Earth-observation data using its open-source foundation models. Users can configure parameters like area of interest, time span, encoder variant (Nano, Tiny, Base), spatial resolution (10m to 80m), and imagery sources (Sentinel-2 L2A, Sentinel-1 RTC) to generate Cloud-Optimized GeoTIFFs (COGs) for downstream tasks.

CoreWeave's Q2 2026 revenue doubled YoY to $2.575B, but operating expenses of $2.624B produced a $49M operating loss and $626M net loss, with total debt at $35.6B. 93% of revenue growth came from existing customers, and just three customers accounted for 72% of quarterly revenue. CEO Michael Intrator pitched AI compute as a continuous recurring loop (training, inference, evaluation, redeployment) rather than a one-time training cost, with managed inference services targeting $250M ARR by end of 2026.

DeepSeek V4 Pro 0813 is now generally available on OpenRouter as a large-scale mixture-of-experts model. It features a 1 million token context window and costs $0.435 per 1M input tokens and $0.87 per 1M output tokens.