AI Weekly Malaysia

Rakyat Digital's Global Learning Pass offers 100,000 free three-month Coursera Plus licenses to Malaysian citizens with an active MyDigital ID. Since sign-ups opened on 16 September, over 12,900 users have registered for more than 43,000 courses. The pass unlocks Coursera's full catalogue, including AI, machine learning, data science, cybersecurity, cloud computing, and software courses, normally priced at USD 59 (~RM240) per month, making it worth roughly RM720 per person.

Sea and OpenAI announced the Malaysian leg of their Regional Codex Hackathon Series for Saturday, 5 December 2026 at Mandarin Oriental Kuala Lumpur. The one-day, 13-hour event will select 40 teams—developers, university students, startups, and technology builders—to build AI tools under the theme “Solving Unmet Needs with AI” using OpenAI Codex and GPT-6 Astra, with Sea and OpenAI mentors on site. Prizes include US$30,000, US$15,000, and US$5,000 in OpenAI API credits, plus ChatGPT Pro subscriptions, as part of an APAC series that started in Singapore and continues to Taiwan, Vietnam, Indonesia, and Thailand.

The Hacker News reports that attackers are actively exploiting a Bricksforge vulnerability rated CVSS 10.0 that allows unauthenticated remote code execution in WordPress. The excerpt provided is almost entirely site navigation and boilerplate — it contains no CVE ID, no affected or patched version number, no exploitation telemetry, and no vendor response, so the only hard facts available are the plugin name, the 10.0 severity rating, and that exploitation is underway.

A personal essay from cendyne.dev describing a layoff the author attributes to economics rather than capability: as the last engineer, they were replaced because an LLM at 'Fable/Mythos tier' of marketed intelligence was cheaper than their compensation, and leadership reportedly felt confident enough to coast until an M&A. The author also reports six or seven people in a DevOps interest group receiving layoffs or notices in the last month, a hiring manager who interviewed them being laid off a week after a CEO posted an 'AI is changing how we develop software' article, and a team offshored after AI assistance raised the output of less experienced, lower-cost staff. Their stated conclusion is that frontier models are still not good enough to replace an experienced engineer. The Hacker News thread drew 212 points and 320 comments.

Malaysia's Budget 2027 extends the Green Investment Tax Allowance (GITA) for EV charge point operators (CPOs) to 31 December 2030, but cuts the allowance rate from 100% to 60% and the statutory income set-off cap from 100% to 70%, per Appendix 25 of the Budget 2027 Tax Measures. The current scheme, revised under Budget 2024 and running to 31 December 2026, let CPOs offset up to 100% of statutory income over five years. SoyaCincau's worked example: a CPO with RM1 million statutory income currently pays RM0 corporate tax; under the 2027 rules GITA covers only RM700,000, leaving RM300,000 taxable.

The Hacker News reports that a threat actor tracked as CyberXero used Claude Code in a campaign that stole more than 628,000 Ukrainian records, published 12 October 2026. The excerpt is almost entirely site navigation and boilerplate: beyond the headline claim, it contains no attack vector, no description of how Claude Code was used, no tooling chain, and no victim or sector breakdown.

ps2-web-recomp is a GitHub project (437 stars, 28 forks, MIT) that runs PlayStation 2 games in the browser without an emulator: the Emotion Engine machine code is statically recompiled ahead of time into C++, compiled to WebAssembly, and linked against a reimplementation of the PS2 OS and hardware that draws via WebGPU. Gran Turismo 4 boots through menus and races with music and memory-card saves at a full 50 fps (PAL) in Chrome on a laptop's integrated GPU at twice PS2 resolution; God of War II runs the same scripts with no game-specific code but exposed two bugs the first title never triggered (one in the recompiler, one in vector unit timing) plus missing IOP pieces, and holds 60 fps in heavy combat at native resolution (48-60 at 2x). No game data is bundled - you supply your own disc image and the repo's scripts produce a local web page; it's the sibling of psp-web-recomp and drew 284 points / 147 comments on Hacker News.

IME brought SOLIDWORKS CEO Manish Kumar onto a panel at IME SOLIDWORKS Innovation Day 2027 and signed a letter of intent with TVETMARA Balik Pulau to strengthen the engineering talent pipeline. The article frames Malaysia’s AI, semiconductor, and smart-factory targets—60,000 high-skilled semiconductor engineers, US$6 billion (RM25 billion) in fiscal support, and 3,000 smart factories by 2030 versus 74 recognised as at 31 May 2026—as constrained by engineering capacity. IME CEO Teoh Jia Yuan says closing the gap needs both more engineers and higher per-engineer productivity, with industrial AI as one lever.

Prime Minister and Finance Minister Datuk Seri Anwar Ibrahim presented Budget 2027 on 9 Oct 2026: RM510 billion total, with a RM30 million MDEC fund for 4,000 SMEs adopting AI, a RM160 million gig-worker support package, JENDELA connectivity upgrades, income tax cuts, and a RM2,000 minimum wage. Microsoft Malaysia MD Laurence Si and Grab Malaysia Executive Director Rashid Shukor welcomed the moves, with Grab co-funding the RM160 million package and projecting up to RM227/month higher net earnings for drivers and RM100 for delivery riders.

Amos B. Batto argues that Linux phones stagnated after the 2020 Purism Librem 5 and PINE64 PinePhone because of weak Linux SoCs, incomplete Plasma Mobile/Phosh interfaces, and problems at Purism and PINE64, but he now sees conditions changing for a small-market alternative to Android/iOS. He points to Motorola's announcement that it will sell some high-end phones with GrapheneOS in 2027, plus increasing Android bootloader lockdowns, as signals that big vendors may offer alternatives. The post compares the opportunity to Linux PCs from small vendors like System76 and TUXEDO, not a fundamental challenge to Google or Apple.

OpenAI announced on October 5, 2026 that it will start adding an invisible watermark to ChatGPT and Codex text in the EU over the coming weeks to comply with the EU AI Act's transparency requirements, but it will not be on by default elsewhere, including Malaysia. The watermark works by subtly altering word choices to create a detectable pattern; the excerpt is truncated before explaining who gets access.

TikTok CEO Shou Zi Chew said at the DBS Asia Future Forward Conference in Singapore that AI will drive real scientific breakthroughs in physics, biotech, chemistry, and material science within two to three years. The article notes ByteDance's Seed research team released Protenix-v2 in April, an AI model for biomolecular structure prediction and design with drug-discovery applications, and Chew raised model-alignment questions if such breakthroughs occur.

U Mobile signed an MoU with Malaysian renewable energy developer HLGY Energy to explore deploying a private 5G network as the communications backbone for smart solar farms, combining U Mobile's ULTRA5G with AI and industrial automation. Named applications are autonomous drone inspections, AI-powered analytics and smart CCTV surveillance for remote monitoring, plus a stated exploration of AI integrated with solar generation and BESS to optimise when energy is stored and supplied. HLGY Energy develops utility-scale solar under Malaysia's Corporate Renewable Energy Supply Scheme (CRESS), including the Kedah Rubber City Solar Power Plant.

TechCrunch's founder guide promotes Disrupt 2026 at SF's Moscone West on October 13-15, themed around building an enduring company in the AI era, with more than 200 expert sessions and networking. It cites past founder outcomes: one saw a 3x oversubscription rate after Startup Battlefield confirmation and more than 100 investor inbounds, while another had nearly 30 back-to-back investor conversations after an onstage pitch. It also lists ticket discounts of $100 and $400 off and argues the event is worth it for founders.

Lowyat.NET reports that JPJ (Malaysia's Road Transport Department) will allow only registered intermediaries to handle transactions on behalf of others. The excerpt supplied is almost entirely site navigation and carries no further detail: no effective date, no registration process, no list of covered transaction types, and no stated penalties are given. Everything beyond the headline claim is unsupported by the text provided.

Lowyat.NET reports that Tabung Haji's core services and systems have been restored after a cyberattack, and that depositors' savings are confirmed safe. The published date is 12 October 2026, but the article body available here contains only the headline and site navigation — no attack vector, outage duration, affected systems, or recovery timeline is given.

Malay Mail republishes an AFP-derived piece on India's 'Techade' push, saying India has committed billions of dollars across semiconductors, electronics manufacturing and artificial intelligence to become a global technology powerhouse. The text names a government-backed semiconductor production push and expansion by Apple and Samsung as notable initiatives, and begins to note India's challenges in matching — but the excerpt cuts off before any figures, policy names, timelines or targets appear.

The essay argues device fingerprinting is replacing third-party cookies as the adtech identity layer, tracing Google’s cookie-deprecation arc from a 2019 pledge to kill cookies, to a Privacy Sandbox that drew antitrust concerns and saw low adoption, to keeping cookies and promising—but not delivering—IP masking only in authenticated incognito. It claims Google ad products can now use device fingerprinting, and the HN thread drew 248 points and 120 comments; the excerpt cuts off before explaining fingerprinting mechanics.

Finland's Licensing and Supervision Authority (LVV) ordered Google's representative company Tuike Finland Oy to suspend preparatory works at two northern Finland datacentre sites — Muhos and Kajaani — by 23 October at the latest, until environmental impact assessments (EIA) are completed. Tuike had felled 330 hectares (815 acres) of forest at Muhos and reportedly logged just under 200 hectares (494 acres) at Kajaani without finishing an EIA, as part of a €13bn multi-site project across northern Finland. Google has until next Wednesday to submit a written explanation; LVV said it would consider enforcement proceedings and a fine if Google does not comply, and Google said it had 'fallen short of our own high standards'.

A Substack post titled 'Passkeys are a trap. Do not use them.' argues that passkeys differ from passwords, authenticator apps and physical security keys because the relying website holds a 'hidden dial' that lets it 'gradually remove your ability to do as you please' with your credentials — though the excerpt cuts off before that technical explanation is given. It frames passkeys as a FIDO Alliance product whose members include Big Tech, banks, national governments and intelligence agencies, and notes that no consumer advocacy groups are members, unlike the W3C which includes public-interest groups and universities. Published 10 Oct 2026, the piece drew 291 points and 165 comments on Hacker News.

TechCrunch reports, citing Bloomberg's Mark Gurman, that Apple will announce a smart home hub called the HomeView on Tuesday, described as a Siri-powered device with a display and an A18 chip, in two models — one for countertops and one wall-mounted. Gurman also says Apple will refresh the Apple TV box and HomePod mini, and earlier reported an LG partnership covering a smart lock, thermostat, and doorbell. The piece frames this as Apple's most serious smart home bet after HomeKit and the HomePod failed to gain much traction, but it contains no pricing, ship date, developer APIs, or platform details.

A New Jersey lawsuit alleges a longtime remote employee was fired after refusing webcam monitoring that would photograph her roughly every three minutes — about 160 photos a day. The Inc. piece (by Chloe Rosenberg) is the source; the excerpt provided cuts off mid-sentence, so the employer's name, the employee's name, and the legal claims beyond the refusal-and-firing allegation are not stated in the text. The Hacker News thread drew 229 points and 169 comments.

Aaron Sorkin's "The Social Reckoning," the follow-up to "The Social Network," is tracking to about $5.5 million in domestic box office its opening weekend, below the studio's own $7-8 million projection; the 2010 original opened at $22 million and made $97 million domestically. The sequel centers on whistleblower Frances Haugen's decision to leak the Facebook files, and it opened the same weekend as Alex Gibney's four-hour documentary "Musk." Tech-CEO films continue through the fall: Nathan Fielder's Elizabeth Holmes documentary next weekend, the OpenAI boardroom drama "Artificial" with a new distributor after Amazon dropped it, and Netflix's FTX series "The Altruists" in November.

Andrej Karpathy re-upped an April tweet arguing the gap in shared understanding of LLM capability has stopped being two groups talking past each other and become a 'sharp funnel' with four tiers: roughly 6B people (~75%) who have barely touched LLMs, 1-2B (~20%) casual free-tier chatbot users who treat it as a better search or writing aid, ~20M (~0.2%) professionals doing frontier-grade math and code work where agents finish weeks-long projects from a prompt, and ~5,000 (~0.00006%) with internal access to frontier systems. He attributes the funnel to impact scaling with ambition, problem size and horizon, plus the jaggedness of the systems. He also notes human review and comprehension are falling behind, citing people still doing 'archeology' on the OpenAI-HF incident and mathematicians working through 722 frontier-mathematics manuscripts. The Hacker News thread drew 259 points and 424 comments.

This OpenStreetMap analysis of North Korea counts 324,415 data points added by 889 contributors since 2007, with the top 10 contributors responsible for 61% of the mapped objects and 62% labeling in Korean. It uses changesets and 211 survey responses to trace where those contributors also mapped, including China, Germany, India, the US, and South Korea for the top 20 Korean-labeling contributors, and India, Germany, Ukraine, Russia, and Japan for the top five.