AI Weekly Malaysia

Cisco has confirmed active exploitation of CVE-2026-20349 (CVSS 8.6), a high-severity denial-of-service vulnerability in Secure Firewall ASA and FTD Software. An unauthenticated remote attacker can send a crafted HTTP request to the Remote Access SSL VPN service on affected devices, causing them to reload. The flaw stems from insufficient error checking when processing HTTP requests and affects devices with IKEv2 Remote Access VPN, SSL-VPN, or Zero Trust Network Access enabled across ASA versions 9.16 through 9.24 and FTD versions 7.0 through 7.6.

OpenAI published two reports—an Enterprise Signals dashboard and a working paper—claiming enterprises are shifting from using ChatGPT for Q&A to executing agentic workflows, with 'frontier firms' adopting plugins, skills, and agents more broadly. Early-career employees reportedly use AI more than senior staff.

Koray Kavukcuoglu, previously DeepMind's CTO and Google's chief AI architect, is replacing cofounder Demis Hassabis as SVP of DeepMind, reporting directly to Sundar Pichai. He inherits oversight of Gemini model development, frontier AI research, and the Gemini app and developer teams, with Google having not released a frontier model since early 2026 while OpenAI and Anthropic have advanced.

China blocked Meta's December 2025 acquisition of Manus AI, the Chinese agentic AI startup that claimed a $100M run rate and had moved its HQ to Singapore. Manus will resume independent operations and will delete all user data generated since December 29, 2025 on August 24, 2026 — users must download before then to restore it afterward.

llama.cpp launched an official website at llama.app with a one-line install script, package manager support (Brew, Winget), and a local coding agent workflow via the pi-llama plugin that auto-discovers your served model with no API keys or config. The site lists supported hardware ranging from Apple Silicon to H100 clusters and highlights models like Qwen 3.6, Gemma 4, GPT-OSS, and Gemma 3.

India's Yulu, a Bengaluru-based electric two-wheeler subscription startup, raised $93M in Series C funding ($63M equity led by GEF Capital, $30M debt) at a ~$170M post-money valuation. The startup rents e-bikes weekly to gig delivery drivers, powers 750,000+ deliveries daily with a 50,000-vehicle fleet, and plans to scale to 200,000 bikes over two years, with 95% of revenue from gig-worker rentals.

Malaysia is positioning itself as a regional green investment destination ahead of COP31 in Antalya, Türkiye. Key milestones include the third NDC submitted in October 2025 with an economy-wide absolute emissions target (peak by ~2030, reduce 15-30 million tonnes CO₂e by 2035), the National Carbon Market Policy launched earlier this year, and Budget 2026 signalling carbon pricing for selected sectors. The National Climate Change Bill (RUUPIN) and Climate Change Authority Bill are in final preparation for Parliament.

A sponsored article by Holistic Enterprise argues Singapore SMEs should treat business loans as proactive growth tools rather than reactive lifelines. It frames the core cash flow problem as a timing mismatch—60-day client payment terms versus upfront supplier demands—and suggests arranging credit facilities before they're needed to negotiate better terms.

Malaysia's MyGOV AI chatbot relaunched in early August 2026 with agentic AI capabilities, nearly a year after the original was shut down for factual errors (e.g., calling Communications Minister Fahmi Fadzil a former Johor Menteri Besar). The new version can retrieve personal government records—JPJ and PDRM summons, passport expiry, travel restrictions, and unclaimed monies—after requesting IC number permission, though the title indicates it still gets some answers wrong.

Reserve Bank of India governor Sanjay Malhotra urged banks to use AI to approve loans for underbanked groups like gig workers and first-time borrowers by analyzing alternative data such as GST filings, utility payments, and digital footprints. He also advocated for AI voice interfaces in local languages to improve financial inclusion and early warning systems for default risk.

Google CEO Sundar Pichai announced Gemini has surpassed one billion monthly users, making it Google's fastest-growing product and the 14th to reach that milestone. The announcement coincides with a significant reorganization of Google's AI division, with Demis Hassabis stepping back and other researchers departing, while competitors have released more advanced models.

The CFTC invoked emergency authority to order prediction-market platform Kalshi to continue operating in New York, citing market stability concerns. The press release is a regulatory action by a US commodities regulator over a specific US-based trading venue.

A fake Wi-Fi hotspot attack was reportedly carried out on a Delta flight, with attendees of the DEF CON hacking conference suspected to be involved. The article text itself was not captured—only the headline and cookie consent boilerplate are available.

Malaysian Immigration has reportedly stopped issuing or renewing passports with validity exceeding 10 years, per a Lowyat.NET report dated August 2026. The article body was not available beyond the headline and site navigation.

OpenAI published a customer story describing how RingCentral rolled out ChatGPT Work and Codex company-wide via an 'AI-Native Challenge' sponsored by the Office of the CEO, aiming to let non-engineering staff build product features and infrastructure. RingCentral reports $2.6B annual revenue and claims AI tools compress the distance between idea and shipped feature across its Agentic Voice AI portfolio (AIR, AVA, ACE).

Anthropic rebranded the Claude Chrome side panel to 'Claude Cowork,' making browser sessions sync with desktop, web, and mobile apps so multi-step tasks carry across surfaces. Claude can see pages, click links, type text, and fill forms using your existing logins, targeting internal dashboards and vendor portals that lack API integrations. It's available on Max and Team plans now, rolling out to Pro over coming weeks, with an 'automatically approve' mode that lets Claude work without pausing for permission at every step.

Modular's Mojo programming language reached its 1.0 milestone, offering a Python-like syntax with Rust-like memory safety designed to unify AI workloads across GPUs, CPUs, and ASICs without vendor lock-in to CUDA or ROCm. Chris Lattner (creator of LLVM, Swift, MLIR) leads the project; Modular was acquired by Qualcomm in June 2026. The standard library ships under Apache 2.0 with LLVM exceptions, but the compiler itself is not yet open source—Modular says that may happen at Modcon next week.

Simon Willison highlights Sophie Alpert's internal policy on acceptable AI writing use by engineers, centered on the principle that there are no lossless transformations of natural-language text—every rewrite changes meaning, and an LLM lacking your mental model will lose information. Alpert's key rule: you must stand behind every idea and sentence in your docs, and it's unacceptable to tell a reviewer 'AI wrote that, just ignore it.'

Researchers found that OpenAI, Anthropic, and Google encrypted chain-of-thought reasoning blocks returned via their APIs could be replayed into weaker sibling models in the same family (which shared the same encryption key) and jailbroken into outputting the raw plaintext reasoning. Claude Haiku 4.5 was the easiest to attack using a prompt that asked it to transcribe reasoning verbatim inside a thinking-copy tag. All providers acknowledged the report and patched the issue.

The article title references Trump pushing Big Pharma to split the MMR vaccine into separate doses, with pharmaceutical companies reportedly opposing the idea. However, the provided article text contains only cookie consent and privacy policy boilerplate—no substantive article content is present.

CNBC's Jim Cramer says investors can gauge the market by tracking three things: bonds, oil, and Nvidia. He argues these serve as proxies for interest rates/Fed policy, inflation/geopolitical risk, and the health of the AI trade respectively. The 30-year Treasury yield is noted at around 5.2%.

Tencent's Hunyuan3D team released WorldClaw, an open-source system that turns a single open-ended text prompt into an explorable, editable 3D world where terrain and every object remain as separate editable instances. It uses agentic planning to maintain global terrain coherence while selectively generating rich local detail, with objects produced by 3D generative models and scatter assets built through 3D coding. The repo and arXiv paper are publicly available, with eleven demo worlds ranging from a snowline village to a tropical island.

Signal introduced Automatic Key Verification (AKV), which uses a new open-source key transparency server with a log tree ledger and prefix tree index to detect if someone has tampered with public encryption keys to intercept messages. Users can tap 'Verify automatically' on a contact's safety number screen to get a green checkmark confirming the key matches Signal's key transparency system. A key caveat: you need your contact's phone number for this to work.

Bloomberg reports that Phia, a shopping startup co-founded by Phoebe Gates and Sophia Kianni, knowingly engaged in 'cookie stuffing'—taking affiliate commissions for purchases it didn't drive—as far back as December, contradicting earlier claims it was unaware. Leaked Slack messages show founders and engineers discussed the practice, which was a purposefully built feature, not a bug. Cookie stuffing reportedly made up a significant portion of Phia's sales, and daily revenue dropped sharply after the practice stopped.

Accel closed an oversubscribed $550M India fund within weeks, just 19 months after its previous $650M India fund, despite still having over 55% of that earlier fund uninvested. The firm plans to begin deploying the new fund in 2027 and sees India's AI opportunity in the application and infrastructure layers rather than competing with foundation model companies like OpenAI.