AI Weekly Malaysia

Signal introduced Automatic Key Verification (AKV), which uses a new open-source key transparency server with a log tree ledger and prefix tree index to detect if someone has tampered with public encryption keys to intercept messages. Users can tap 'Verify automatically' on a contact's safety number screen to get a green checkmark confirming the key matches Signal's key transparency system. A key caveat: you need your contact's phone number for this to work.

Bloomberg reports that Phia, a shopping startup co-founded by Phoebe Gates and Sophia Kianni, knowingly engaged in 'cookie stuffing'—taking affiliate commissions for purchases it didn't drive—as far back as December, contradicting earlier claims it was unaware. Leaked Slack messages show founders and engineers discussed the practice, which was a purposefully built feature, not a bug. Cookie stuffing reportedly made up a significant portion of Phia's sales, and daily revenue dropped sharply after the practice stopped.

Accel closed an oversubscribed $550M India fund within weeks, just 19 months after its previous $650M India fund, despite still having over 55% of that earlier fund uninvested. The firm plans to begin deploying the new fund in 2027 and sees India's AI opportunity in the application and infrastructure layers rather than competing with foundation model companies like OpenAI.

Microsoft's August 2026 Patch Tuesday fixed 421 vulnerabilities, down ~200 from the prior month but described as the new norm under AI-assisted disclosure. One of them, CVE-2026-68820, was already exploited as a zero-day by North Korea's Lazarus Group since early June—a use-after-free in the Windows Ancillary Function Driver for WinSock allowing SYSTEM-level code execution by a locally authenticated attacker with no user interaction.

The article URL points to an Ars Technica story about Romanian forces destroying Russian drones drifting near a vital European offshore gas site, but the fetched content contains only cookie consent and privacy policy boilerplate with no substantive article text.

An internal US Defense Department memo dated August 4, 2026, drafted by Deputy Secretary of Defense Stephen Feinberg, directs officials to purchase up to $243.9 million in services from Palantir without competitive bidding through March 31, 2027, with additional funding options extending to December 31, 2028. The memo says Palantir is helping the DoD understand delays in munitions and vehicle production and maintenance. A POGO director noted that the DoD is generally required to use competitive contracting unless a written justification is provided under 10 USC 3204.

OpenAI-backed Chai Discovery, valued at $4B and just 2 years old, closed four major AI tools deals with pharma companies at JPMorgan's January pharma conference. Cofounder Matt McPartlon and product lead Neil Patil explain that AI drug design tools have crossed a trust threshold, enabling capabilities like bi-specific antibody design that were previously impractical through lab-based discovery alone.

Nvidia has lined up $500 billion in financing through agreements with six major Wall Street firms (BlackRock, Blackstone, Apollo, KKR, Brookfield, Goldman Sachs) to fund AI infrastructure buildout, treating chips as long-term financial assets. Analysts warn that if China floods the market with low-cost compute, rapid hardware depreciation could crash the collateral values backing these loans, pushing investor yield demands to 11-17%.

The provided article text contains only cookie consent and privacy policy boilerplate from Ars Technica, not the actual article content about Chrome's account takeover protection. No substantive details are available.

A federal judge has allowed a $1.4 trillion lawsuit by multiple US states against Meta to proceed to trial, denying Meta's motion to dismiss. The actual article content was not available—only cookie consent boilerplate was captured.

Tom's Hardware reviews the Razer Naga V3 Pro, a 23-button gaming mouse priced at $179.99, calling it a solid upgrade over the Naga V2 Pro, especially if you already own Razer's HyperPolling Wireless Dongle or Mouse Dock Pro. The review awards it an Editor's Choice.

Microsoft's August 2026 Patch Tuesday closes 398 CVEs (62 Critical), including CVE-2026-68820, a use-after-free in afd.sys (Windows kernel WinSock driver) under active exploitation that escalates privileges to SYSTEM. Check Point Research attributes the zero-day to Lazarus's Operation Dream Job campaign. Four unauthenticated 9.8-CVSS remote code execution flaws affect Windows DNS Server (described as wormable by ZDI), Windows Deployment Services, Microsoft's QUIC implementation, and HPC Pack.

Uber sold its entire stake in Serve Robotics, the autonomous sidewalk delivery robot company that spun out of Postmates in 2021. Serve's CEO Ali Kashani disclosed on the August 6 Q2 earnings call that delivery volume through Uber had declined for the first time after 17 consecutive quarters of growth, citing lower-than-expected robot utilization and 'differing views' on how to scale the shared autonomous fleet.

An ngrok blog post by Annie Sexton walks through compression fundamentals—minification, run-length encoding, and the three organs of modern compressors (transforms, models, entropy coders)—to argue that compressors and LLMs are solving the same underlying problem: prediction. The piece uses interactive code examples to show how redundancy reduction maps to predictive modeling.

Google says Gemini has reached 1 billion users faster than any other product in the company's history, making it their fastest-growing product ever. The article body was not accessible beyond cookie-consent boilerplate, so details on methodology, timeframe, or product breakdown are missing.

Brad Lightcap, who joined OpenAI in 2018 and served as COO for four years, announced his departure to 'start something new.' He had already been moved to a 'special projects' role in April, with Chief Revenue Officer Denise Dresser taking over most of his responsibilities.

The FBI issued a public alert warning that cybercriminals are hacking social media accounts of adults and children to steal intimate images, relying on social engineering, brute-forcing leaked passwords, fake customer-service impersonation, and phishing pages mimicking social media login screens. Rachel Tobac, CEO of SocialProof Security, noted the alert likely signals rising incidents, particularly targeting young boys, and described it as a public health issue given victims sometimes self-harm.

Palo Alto Networks Unit 42 discovered Kimwolf v7, an Android/IoT botnet variant active since mid-2024 that now uses HTTP/2 flood attacks with complete browser fingerprints via the nghttp2 library, making DDoS traffic indistinguishable from legitimate browsing. The botnet targets Android TV boxes with ADB enabled on port 5555, uses Ethereum Name Service (ENS) and Tor .onion for resilient C2, and has split propagation into a separate external loader while the core binary handles DDoS and proxy relay.

NVIDIA announced Nemotron 3.5 Lightning, a 30-billion-parameter mixture-of-experts open model designed for high-volume specialized tasks within multi-agent systems, claiming up to 4x faster output speed and 30% faster agentic task completion versus peers in its class. They also released NeMo Switchyard, an open source routing library that directs each request to the most suitable model across a mix of open, proprietary, and NVIDIA models without requiring application rewrites.

OpenAI launched a ChatGPT desktop app for Linux in preview, supporting Ubuntu 24.04 and 26.04 LTS, Debian 13, and Fedora 43/44, covering ChatGPT, ChatGPT Work, and Codex. Anthropic beat them to it by about a month with a Claude Linux desktop app supporting Ubuntu 22.04+ and Debian 12+.

Three Zoom annotation-tool flaws allowed any meeting participant to hijack another attendee's client with no victim interaction—no click, download, or prompt required. Patches shipped in June and July 2026 (Zoom Workplace before 7.1.5/7.0.6, VDI Client before 7.0.11/6.6.16, Rooms/SDK before 7.1.0/7.1.5), with no exploitation reported. Researcher 'A Security' claims they went from finding the flaw to a working exploit in under a day using fewer than 20 prompts on unnamed publicly available AI models, exploiting a 128-byte buffer overflow in annotation data parsing and a missing origin check that let one malformed drawing reach the entire room.

Bitcoin miner Riot Platforms signed a $9.1 billion, 20-year deal with Anthropic to lease 191 megawatts at its Rockdale, Texas campus, giving Anthropic access to grid-connected power for AI compute. The deal could rise to ~$16.1 billion if extended for two additional five-year periods, and follows Riot's existing AMD agreement, bringing total contracted data center revenue to $9.8 billion.

Together AI signed a $240M deal with IBM Cloud to run its OpenAI-compatible inference platform on a large cluster of Nvidia HGX B300 GPU systems, launching Q1 2027. The B300 is a conventional air-cooled 8-GPU-per-box platform, not Nvidia's top-tier rack systems, but IBM had the capacity Together AI needed. Together AI also runs services on SambaNova's Intel-collaboration platform, showing it is hardware-agnostic so long as price-performance holds.

Google CEO Sundar Pichai announced the Gemini app has surpassed 1 billion monthly active users, making it the 14th Google product to hit that mark and roughly matching ChatGPT's 1 billion MAU reached in June 2026. Google also noted 63% of Gemini users interact via voice, the app generates over 150 million images daily, and it has over 100 million active iOS users. The announcement comes ahead of the Made by Google event and follows the Q2 2026 earnings call where Gemini had 950 million monthly users with daily active users tripling year-over-year.

CERT-UA reports that Russian GRU-linked Sandworm subgroup UAC-0145 has been running a fake recruitment campaign since May 2026, targeting Ukrainian IT workers and sysadmins via job sites and Telegram. The attackers impersonate recruiters from legitimate firms like Sopra Steria Bulgaria, conduct real Zoom interviews (possibly with an AI-generated persona), and trick victims into installing a malicious VPN client called 'SopraVPN' hosted on SourceForge after legitimate WireGuard configs fail.