AI Weekly Malaysia

Daniel Gultsch reports that Google Play app review now regularly exceeds one week, with his XMPP client Conversations (an app with 12+ years on the store, monthly update cadence) still pending review a week after submission on September 9. He attributes the backlog to the pipeline being 'clogged with AI slop' and calls on Google to prioritize established apps.

Google patched a high-severity Pixel Cellular Modem privilege escalation flaw (CVE-2026-58704, CVSS 8.0) that shows signs of limited targeted exploitation, alongside 109 other vulnerabilities in the September 2026 Pixel update—46 of them critical-severity across components like BigOcean, Bootloader, IMS, and TEE. The modem bug allows remote adjacent escalation of privilege with no user interaction. Patch level 2026-09-05 or later resolves all issues.

NVIDIA announced two tracks for writing GPU kernels natively in Rust: cuda-oxide (SIMT-style, compiles to PTX via custom rustc backend, requires nightly Rust, early alpha) and cutile-rs (Tile-based, runs on stable Rust 1.89+ with CUDA 13.3, already published on crates.io and used in HuggingFace's Grout inference engine and mistral.rs). Both enforce compile-time memory safety—cuda-oxide via DisjointSlice and launch contracts, cutile-rs via tensor partitioning and ownership.

The article argues that threat intelligence feeds produce signals faster than security teams can validate them, creating a backlog where real exposure accumulates. Attackers are using AI-assisted exploitation to move from leaked credentials or disclosed vulnerabilities to breach faster than defenders can triage. The piece frames threat-led penetration testing (TLPT) as the solution and highlights a Pentera–Recorded Future integration that automatically validates specific threat signals against a live environment.

A GPT-6 Astra model was tested over 141 hours in Minecraft and progressed further than any prior AI system, but after being killed by a Creeper it spent several hours stuck farming potatoes — a behavioral loop suggesting long-horizon agent resilience is still unsolved.

TypeSafe launched Jev, a non-autoregressive 'System One Model' trained via RLCD (calibrated decisions) that only performs classification, routing, scoring, and decisions — not text generation. It claims 20-200x faster inference and 40-400x cheaper than small frontier LLMs, with parallel sampling, calibration, and 'no hallucination' by design. The launch topped Hacker News; founder Diogo Almeida claims to have co-invented ChatGPT and spent two years in stealth building the RLCD training method.

Acronis has disclosed CVE-2026-87886 (CVSS 7.8), a local privilege escalation flaw in its Backup plugin for cPanel/WHM and Plesk on Linux, caused by insecure file permissions. The vulnerability is being exploited in limited, targeted attacks; affected builds are cPanel plugin versions before 1.9.3.1021 and Plesk extension versions before 1.8.11.638, with fixes available in 1.9.3 HF3.

AWS has reportedly told customers in Abu Dhabi and Bahrain to relocate their data six months after Iranian drone strikes damaged data centers in the region, with no timeline for resuming operations. The UAE is now considering building underground data centers as a protective measure.

Nvidia is reportedly refusing warranty claims for RTX 5090 GPUs ($6,500) because the serial number on the card has faded, and multiple customers say this is not an isolated issue. The article itself is paywalled behind Tom's Hardware Premium, so details beyond the headline are unavailable.

Tom's Hardware highlights a discounted MSI Codex R2 desktop (RTX 5060, 32GB DDR5, 2TB SSD, 10-core Intel CPU) now under $1,430, down $270 from its usual price. The article is essentially a deal listing for a 1080p gaming PC.

Salesforce's status page was flagged on Hacker News, but the provided text is only a raw dump of instance names and product listings with no incident description, timeline, root cause, or customer impact. There is no actionable detail about what broke, which services were affected, or how long the outage lasted.

Amazon launched Alexa+ in India with Hindi and English support in Early Access, free for Prime customers and ₹2,000/month ($20.85) for non-Prime. The assistant handles multi-step tasks like ordering groceries via Amazon Now and controlling smart home devices, with integrations into local services including Swiggy, Zomato's District, MakeMyTrip, TripAdvisor, and EazyDiner, plus mid-sentence language switching between Hindi and English.

After four years of reverse engineering and chemical decapping, an enthusiast has unlocked the secrets of the original PlayStation 2's MechaCon security chip (CXP102064), 26 years after the console's release. The article text itself is mostly site boilerplate with no additional technical detail beyond the headline.

A 9-year-old ran up $118,000 in YouTube ad charges over three weeks promoting his Minecraft channel on a company credit card, when the intended spend was a single $20 promotion. The story highlights how easily Google Ads spending can spiral without hard caps or payment alerts.

A Mozilla report claims China's open-weight AI models now trail US frontier models by only about 4 months, with remaining benchmark gaps offset by drastically lower usage costs. The title is the substantive content; the article body is mostly site navigation boilerplate.

Researchers from OpenAI, Anthropic, and Google DeepMind have issued warnings about catastrophic AI risks over the past week, with AI leaders including Sam Altman, Dario Amodei, Demis Hassabis, and Elon Musk calling for slowdown and regulatory oversight. U.S. President Donald Trump has pushed back against growing calls for AI regulation, creating a political firestorm in Washington.

An AI enthusiast built a bot powered by GPT-6 Astra that repeatedly beats Balatro's hardest difficulty (Gold Stake Black Deck), using Python for numerical tooling alongside the model. The article itself is mostly site navigation boilerplate with almost no technical detail beyond what the title states.

European Commission President Ursula von der Leyen backed a proposal for Canada to become the EU's first 'associate member,' with cooperation areas listed including AI, technology, manufacturing, defence, energy, and critical minerals. The concept of associate membership does not currently exist in EU structures, and the process could take years. The push is driven by Canada's deteriorating trade relationship with the US under Trump's tariff policies.

BT Email customers have reported receiving hundreds to over 1,000 unsolicited password reset PIN messages in rapid bursts since the weekend, with BT investigating but offering no explanation. BT says accounts are secure and no action is needed, though at least one unverified customer claim suggests an account takeover occurred during the PIN flood.

Mark Seemann publishes a reader's letter from someone with no formal CS background who used LLMs to build a large TypeScript/JavaScript system (APIs, PostgreSQL, LLM pipelines, research automation, multi-model workflows), then hit a wall moving to production: 'I may have built a system that is above my own level of understanding.' Seemann, with 30+ years of experience, admits he leans toward disliking LLMs while acknowledging they may be unstoppable, and is most resentful when they perform best.

OpenAI analyzed 1.5M+ work-related ChatGPT messages (April–July 2026) and found workers repeatedly use AI for tasks outside their own occupation, turning one-off cross-occupation experiments into recurring workflow habits. Workers write shorter prompts for out-of-role tasks but are more likely to provide examples, background context, or ask AI to verify something—suggesting they use AI to 'borrow expertise' rather than learn a new field from scratch.

The UK's ARIA agency is spending £70M ($94M) over 3.5 years on 18 projects developing high-altitude pseudo-satellites (HAPS) — aircraft that loiter in the stratosphere to provide connectivity as an alternative to orbital satellites. Success is defined as keeping a 300W comms payload aloft for a full week over the UK, with projects covering power beaming, fuel cells claiming 20x battery energy density, and drone constellations targeting £50,000 per unit.

Mistral and Mozilla announced a partnership to power Firefox's Smart Window (beta), an AI browsing assistant that helps with complex searches, tab-based recall, and information sourcing. The feature is live for users in France and North America, with the UK and Germany expected to follow later.

Binance is opening its Capital Connect platform, previously institutional-only, to eligible individual investors holding at least $1 million in assets. The platform has roughly doubled its portfolios and professional trading teams since May, and lets investors allocate to professional strategies without the trading team setting up a separate fund vehicle.

Malaysian edtech startup Tupai.ai, co-founded by Edmond Yap and Andre Sequerah, has evolved from a beta AI math tutor into a broader peer-learning model now deployed in Malaysian schools. The urgency is underscored by Malaysia's latest PISA 2025 results: only 35% of 15-year-olds reached baseline math proficiency (vs OECD 65%), and just 0.6% were top performers, with the share of below-baseline students rising 24 percentage points since 2018. The Ministry of Education is developing a Mathematics Misconceptions Module in response.