AI Weekly Malaysia

Cisco patched nine vulnerabilities across Crosswork and Secure Workload products, five scoring CVSS 10.0, including SQL injection, missing authentication, and command injection flaws. All were found during internal testing with no known active exploitation, and fixes are available in Crosswork 7.2.1-SP, Secure Workload 3.10.9.1, and 4.0.4.16.

DataDome researchers report that scalper bots now outnumber human shoppers 10-to-1 on at least one retailer's DDR5 listing pages, hitting listings every 6.5 seconds. 32GB DDR5 kits have surged from $72 to $392, a roughly 5x price increase driven by automated scraping and hoarding.

Article URL: https://htmlcat.net/ Comments URL: https://news.ycombinator.com/item?id=49385860 Points: 237 # Comments: 58

Kelas Sekejap, an AI-native learning app co-founded by Khairy Jamaluddin, Shahril Hamdan, and Isaac Tan, has grown to 15,000 registered users and 6,000 active AI-tutor conversations since its January 2026 launch. It is expanding into formal education with Kelas SPM (active in schools across KL, Negeri Sembilan, and Melaka) and into corporates with an enterprise tier that converts internal company knowledge into AI coaching for employees. Its seed round was led by Tan Sri Nazir Razak, with pre-seed backers including Khailee Ng, Joel Neoh, Bryan Loo, and First Move.

Google is offering eligible university students in Malaysia (aged 18+) a free 12-month Google AI Plus plan valued at RM287.88 (RM23.99/month), including 2x Gemini usage limits, 400GB shared cloud storage, and full multimodal Gemini features. Discounted tiers are also available: Google AI Pro at RM23.99/month (down from RM97.99) and a Pro + YouTube Premium bundle at RM33.49/month (down from RM118.89), with promotions running until 31 December 2026.

CableLabs warns that Wi-Fi 7 access points using WPA3 can break connectivity for legacy Wi-Fi 4/5 devices, because some older clients misinterpret WPA3-Personal Transition Mode security options and fail to connect. CableLabs is urging chipset vendors and hardware makers to prioritize support for the Wi-Fi Alliance's WPA3-Personal Compatibility Mode (PCM), which shifts WPA3/Wi-Fi 7 security info into RSNO elements while advertising WPA2-Personal through legacy RSN elements.

Samsung Electronics announced an expected 90 to 110 trillion won ($65.1B–$79.5B) in shareholder returns for 2026, calling it the largest ever by a Korean company, and will pay roughly 30 trillion won in Q3 cash dividends. This follows SK Hynix's share buyback disclosure days earlier, as both Korean memory giants ride AI-driven demand for high-bandwidth memory chips.

UNICEF and MDEC announced a partnership at BAGFEST 2026 in Kuching to embed children's rights and safety into Malaysia's games industry using UNICEF's RITEC (Responsible Innovation in Technology for Children) framework. MDEC CEO Anuar Fariz Fadzil said the collaboration will provide practical guidance to Malaysian studios to consider child well-being from the design stage, framing it as strengthening competitiveness rather than limiting creativity.

Debian turned 33 last weekend, with Debian 13 having released about a year ago and the project remaining one of the most widely used Linux distributions. Haiku OS, an entirely from-scratch C++ operating system inspired by BeOS, turned 25 and is nearing its beta 6 release with a branch expected by end of week and a target release date of mid-August.

At least 9 of Japan Home's 34 Singapore stores have closed or are being converted to Valu$ dollar-store outlets between June and August 2026. Singapore-registered Radha Japan, which already holds ~30% of Japan Home Singapore per ACRA filings, appears to be taking over operations, though a Valu$ store manager denied a full replacement.

UK mobile operator EE (BT Group) launched 'Fast Lane,' a consumer 5G network slicing service that prioritizes eligible subscribers' connections during congestion for £5 ($7)/month extra on its Full Works Plus plan. Vodafone UK already launched a similar enterprise-focused 5G slicing service earlier this year. The concept sparked US net neutrality debates when the FCC ruled out paid fast lanes.

Article URL: https://remapradio.com/articles/the-lost-treasure-of-sid-meiers-pirates/ Comments URL: https://news.ycombinator.com/item?id=49384896 Points: 267 # Comments: 145

GitLab CVE-2026-19478 (CVSS 9.4), a code injection flaw exploitable via a GraphQL directive by unauthenticated attackers, is under active exploitation within days of disclosure. It affects self-hosted GitLab CE/EE versions 18.2 (before 18.11.11), 19.0 (before 19.0.8), 19.1 (before 19.1.6), and 19.2 (before 19.2.4). watchTowr reports attackers can delete repositories, forge merge records, and ban maintainers; they recommend hunting web logs for '@gl_introduced' and patching immediately or restricting unauthenticated access to /api/graphql.

Tesla Malaysia launched its first Supercharger in Perak at Aeon Mall Kinta City Ipoh, featuring 4 V4 DC bays delivering up to 250kW, located near the PLUS highway as a mid-point stop between KL and Penang. Free charging is offered from 21-23 August 2026. This brings Tesla Malaysia's total to 21 Supercharger locations with 92 DC charge points nationwide.

Chinese video-sharing platform Bilibili is expanding internationally with an Android app (iOS forthcoming), targeting Gen Z, affluent, and well-educated users. It has eased restrictions such as ID verification for non-China users, lowering the barrier to entry for global creators and viewers.

A Register 'On Call' anecdote features a developer sent to a power station to document and fix undocumented monitoring code running on a dusty CP/M machine connected to a turbine overspeed detector. Faced with no documentation and the risk of causing a turbine overspeed or city-wide blackout, he decided the safest action was to not touch the code at all.

Update: The story was updated after publication to note that the vulnerability has not been exploited. Although the security bulletin originally marked the "Exploited" field under the Exploitability Assessment table as "Yes," on August 21, 2026, Microsoft corrected the "Exploited" status to "No" after The Hacker News contacted the company for comment. It also noted, "this vulnerability was not

TNG eWallet has received recognition from Jabatan Tenaga Kerja Sarawak (JTK Sarawak) as an alternative salary payment method, completing nationwide coverage across all Malaysian labour authorities. Over half a million users are already receiving wages through TNG eWallet, with more than RM5.7 billion disbursed in 2026 so far. Employers can transfer wages directly from any Malaysian bank into a worker's TNG eWallet via a DuitNow account number assigned to each verified user.

Poolside AI struck a non-exclusive licensing deal with Nvidia worth $6 billion plus a $1 billion investment at a $12 billion pre-money valuation, with 109 of Poolside's ~115 technical employees moving to Nvidia while founders remain. Poolside lost a 40,000 GB300 cluster deal after failing to raise $2 billion in a 6-week window late last year, and concluded that next year's frontier model compute requirements need clusters an order of magnitude larger—constrained not just by capital but by physical data center space.

Article URL: https://sockpuppet.org/blog/2026/08/20/stop-making-tuis/ Comments URL: https://news.ycombinator.com/item?id=49384210 Points: 384 # Comments: 502

Cisco disclosed five vulnerabilities in Secure Workload Software (formerly Tetration), a micro-segmentation tool, with CVSS scores of 10, 10, 9.9, 9.6, and 7.5. SaaS users must update Agent and Connector tools; on-prem users on 3.10 or earlier need 3.10.9.1, and 4.0+ users need 4.0.4.16. Cisco found the bugs through an internal review that used 'frontier AI models,' possibly referencing Project Glasswing access to Anthropic's Mythos model.

Article URL: https://www.xda-developers.com/japan-tried-build-operating-system-entire-world-us-government-intervened/ Comments URL: https://news.ycombinator.com/item?id=49384180 Points: 376 # Comments: 226

An AWS-commissioned study by Strand Partners reports 38% of Malaysian businesses now use at least one AI tool, up from 27% in 2025, totaling 3.4 million businesses. However, 67% remain at basic usage (public chatbots, ready-made tools), only 19% have a formal scaling strategy, and 57% primarily source AI capabilities externally—with 69% saying locally based software providers are important to their adoption.

Alibaba Cloud reported that its AI servers pay back their cost in 3 years and generate free cash flow in years 4-5, with 2018/2020-era Nvidia V100 and A100 machines still running near full capacity. The company plans to shorten payback to 2.5 years by increasing the proportion of self-developed chips in its data centers, replacing commercially purchased chips. Over 650 external customers now use Alibaba's own chips, and Q1 capex hit $10B, up 75% year-over-year, partly driven by anticipated AI agent adoption.

Charge+ has activated its first EV charging station in Sungai Petani, Kedah, at Murtadha Dakwah Centre (MADAD), a 24/7 community hub. The site offers a 40kW DC charger (RM1.25/kWh, two CCS2 nozzles) and two 22kW AC charge points (RM1.00/kWh), activatable via the Charge+ app or TNG eWallet's EV Charging mini programme, with a RM150 pre-authorisation hold.