AI Weekly Malaysia

A dark web service called Nexus was selling access to 153 million US and Canadian driver's licenses and 3 million travel documents, exfiltrated continuously for over a year from identity verification service IDScan. Krebs on Security verified the licenses were genuine and linked the breach to IDScan, which has confirmed it is investigating. The FBI is involved, and the data has national security implications beyond routine identity theft because license numbers are key identity documents used in intelligence operations.

Disney+ Malaysia is migrating all subscribers to a brand-new app on 7 October 2026 under the global MyDisney framework, with no price change. Existing profiles, Watchlists, and viewing histories will not carry over—users must rebuild their primary profile from scratch and manually note unfinished episodes. Basic plan subscribers move to Disney+ Standard (1080p, 2 streams), while Premium retains 4K and 4 streams; Astro, Unifi TV, and CelcomDigi bundle users may see different rollout dates.

X's cease-and-desist letter over alleged API circumvention and scraping has finally killed Nitter and XCancel. Nitter's GitHub repo was archived to read-only on September 11, 2026, and XCancel suspended its service on September 15, citing new developments in ongoing legal proceedings.

OpenAI's global policy chief Chris Lehane confirmed that OpenAI, Anthropic, and Google DeepMind have been in private AI safety talks for weeks, following Dario Amodei's essay calling for the industry to collectively slow frontier AI development. The three firms are reportedly working to create an industry standards body without U.S. government support, despite antitrust risk — Lehane said they don't need the government waiver Amodei proposed.

Lumen Black Lotus Labs disclosed BambooToken, a multi-platform malware family active since at least February 2023 that uses MQTT as a command-and-control channel to control Windows and Linux systems. The malware sideloads via Tendyron's OnKey PKI USB token software (190 million tokens in circulation, used in China's financial and government sectors), exploiting a DLL sideloading vulnerability. Targets span organizations across Asia and South America, with most VirusTotal uploads from Chinese IP space.

Profound, an answer engine optimization (AEO) startup, raised a $180M Series D at a $1.8B valuation led by Sequoia and Kleiner Perkins, just seven months after a $96M Series C. The company claims revenue tripled in six months and now serves 1,000+ enterprise customers including Comcast, Estée Lauder, and Walmart, helping brands surface in AI search results.

DoorDash is investing $425 million total in Marc Lore's ghost-kitchen company Wonder: $300 million to acquire its Grubhub Campus Dining business (live at 450 colleges, formerly Tapingo) and $125 million added to Wonder's $650 million Series D. DoorDash plans to expand campus dining into stadiums, hotels, and other venues, while Wonder continues building toward what Lore calls a 'fully autonomous food system' across its 157 locations.

RTX 5090 stock is so constrained that Asus' $10,850 20th-anniversary bundle — which includes a 3000W PSU, X870E motherboard, and open-frame case alongside the GPU — is now the cheapest legitimate way to acquire Nvidia's flagship, undercutting some scalper listings. The bundle itself is absurdly priced, yet still wins on cost because standalone 5090 supply has effectively vanished at MSRP.

X's legal team has again forced Nitter and XCancel offline — services that let users view X posts without an account, JavaScript, or ads. Nitter's code repository was archived on September 11, 2026, and XCancel displays a suspension notice citing new developments in ongoing legal proceedings, with no clear path back.

DigiCert's sponsored pitch for its AI Trust framework argues enterprises are losing visibility over AI agents, citing IBM's 2026 Cost of a Data Breach report showing 68% of organizations lack AI governance (up from 63%) and only 38% require IT approval to deploy AI (down from 45%). The framework uses PKI, DNS, and attestation to answer five governance questions: what agents employees use, what regulated data flows to them, whose credentials they hold, whether a compromised agent can be stopped immediately, and whether incidents can be reconstructed with a tamper-evident trail.

Israeli Culture Minister Miki Zohar has called for filmmakers Yuval Abraham and Rachel Szor to potentially lose their citizenship over their Gaza documentary 'Naza.' The item is a licensable Reuters video clip with no technical, AI, or developer-relevant content.

Former TikTok employees Melody Chu and Jing Liu launched Superpose, an iOS camera app that generates four AI-suggested poses per photo and offers a match-pose feature to help users replicate them. The app launched in July 2026, has 22,000 downloads and 190,000 poses generated, with a freemium model: 5 free generations/day, $2.99 for 5 more, or $9.99 for 20.

TechCrunch Disrupt 2026 (October 13–15, Moscone West, San Francisco) will feature a Real World AI Stage session titled 'From Prototype to Production: Can It Scale in Reality?' with speakers from space communications, autonomous systems, and AI infrastructure discussing the gap between working AI prototypes and production-ready deployments. The event expects 10,000+ attendees across 250+ sessions, with OpenAI, Anthropic, and Replit among named participants.

India's NPCI will impose a 0.4% merchant fee on UPI transactions above ₹2,000 (~$21) starting October 15, 2026, ending six years of free merchant acceptance. The fee is capped at ₹300 (~$3) for transactions of ₹75,000+, and merchants receiving under ₹100,000/month remain exempt. Consumers continue to pay nothing.

Intel has reportedly dropped the 12Xe graphics option for its Nova Lake-S desktop CPUs, pushing the gaming APU design to a future architecture codenamed Razor Lake. The article is a roadmap rumor with no benchmarks, dates, or product specs.

Texas utility CenterPoint Energy disclosed a breach via SEC Form 8-K after a cybercrime forum post claimed 7.49 million files were stolen from a poorly secured API. The alleged data includes customer names, contact details, billing data, move-in dates, driver's license info, and last four digits of SSNs. CenterPoint says electricity and gas services remain operational and does not expect material financial impact.

Women's health startup Evvy raised a $40M Series B led by Catalio Capital Management to expand its at-home vaginal microbiome testing and build a dataset linking microbiome biology, symptoms, interventions, and outcomes. The company serves over 100,000 U.S. patients and 3,000 practitioners, and has produced 15 peer-reviewed publications. CEO Priyanka Jain argues precision medicine is flawed because existing datasets inadequately measure female biology, and that leading AI models struggle with women's health questions.

TechCrunch Disrupt 2026 exhibitor tables are on sale for $12,500, with a booking deadline of Friday, September 18 at 11:59 p.m. PT. The package includes 10 event passes, Disrupt mobile app lead capture, press list access, and Silver Tier sponsor branding; tables are first-come, first-served and may sell out before the deadline.

A projection cited by Tom's Hardware estimates US AI data centers will become the world's fifth-largest natural gas consumer by 2035, with consumption growing by 15 billion cubic feet per day as compute demand scales. The article body contains no substantive analysis beyond the headline figure.

The Trump EPA is moving to eliminate remaining greenhouse gas rules for U.S. power plants, per an Ars Technica report. The provided article text contains only cookie consent boilerplate, not the actual reporting.

Microsoft released an out-of-band update for Windows 11 24H2 and 25H2 after September's Patch Tuesday fixed nearly 1,000 vulnerabilities but broke RDP, Hyper-V folder sharing with Linux VMs via Plan9, and USB Audio Class 1.0 devices. The emergency patch fixes RDP and Hyper-V issues, but USB audio problems persist—some devices remain silent or show Code 10 errors. A separate September update also broke Excel's Paste function, which remains unfixed.

A Swiss court sentenced a 52-year-old Ukrainian man to 12 years and 9 months for developing LockerGoga, MegaCortex, and Nefilim ransomware used in attacks on companies including Stadler Rail, Meier Tobler, and Crealogix. He was arrested in October 2021, denied knowing his code was used criminally, but the court rejected his defense after finding extortion messages alongside source code at his home. The operations hit over 1,800 targets across 71 countries, causing estimated losses of several hundred million Swiss francs.

Capsule is a new tool that bundles an entire app—HTML/CSS UI, media assets, and a local SQLite database—into a single portable .capsule file that runs on desktop and web preview. It supports AI-generated apps from text prompts via ChatGPT, Claude, or Gemini, and allows live iteration through direct AI prompts or MCP coding tools. The pitch is zero cloud, zero accounts, zero vendor lock-in: share the file like a PDF and it opens with all data preloaded.

GM is reportedly updating the infotainment UI on its key truck models and, notably, including CarPlay support. The article body was not available—only cookie consent boilerplate was captured.

JDK 27 is now Generally Available as build 35, with no P1 bugs reported since the second release candidate on 20 August 2026. The release ships 9 JEPs, most notably making G1 the default garbage collector in all environments, enabling compact object headers by default, and adding post-quantum hybrid key exchange for TLS 1.3. Structured Concurrency remains in its seventh preview and the Vector API in its twelfth incubator.