AI Weekly Malaysia

A researcher going by 'Chaotic Eclipse' has published a proof-of-concept called ShieldBreak that claims to fully bypass Microsoft's patch for CVE-2026-50656 (RoguePlanet), a race condition in the Microsoft Defender Malware Protection Engine (mpengine.dll) that can grant SYSTEM-level privileges. The PoC reportedly has a 100% success rate on Windows 11 25H2 and Windows Server 2025, with Windows 10 also vulnerable but untested. Microsoft says it is investigating the patch bypass claim.

LinkedIn CringeBot 3000 is a satirical web tool that generates parody LinkedIn 'thought leadership' posts from any topic, offering style presets like 'The Hot Take,' 'The Vulnerability Post,' and 'Proud to Announce.' It's essentially an LLM wrapper with curated prompt templates designed to mock common LinkedIn posting tropes.

Mark Pesce gave an AI agent SSH access to a 15-year-old device running ancient Arch Linux with a browser too old for modern encryption. Over three hours the agent failed to compile modern cURL, then found a fast math library that solved the CPU's lack of floating-point support, and got the device chatting via Telegram. He then used agents to revive a 12-year-old iMac Pro on Ubuntu, a 10-year-old VR PC, and an underpowered Surface Go, arguing that agents have made the cost of testing ideas nearly zero.

Malaysia's Ministry of Digital launched an upgraded Rakyat Digital portal consolidating government digital learning initiatives under a single account, with a programme starting 31 August 2026 giving 100,000 Malaysian youths aged 18-30 three months of free access to leading generative AI applications after completing selected learning modules. The first cohort of 25,000 begins 16 September 2026, with three more cohorts to follow.

Cisco has confirmed active exploitation of CVE-2026-20349 (CVSS 8.6), a high-severity denial-of-service vulnerability in Secure Firewall ASA and FTD Software. An unauthenticated remote attacker can send a crafted HTTP request to the Remote Access SSL VPN service on affected devices, causing them to reload. The flaw stems from insufficient error checking when processing HTTP requests and affects devices with IKEv2 Remote Access VPN, SSL-VPN, or Zero Trust Network Access enabled across ASA versions 9.16 through 9.24 and FTD versions 7.0 through 7.6.

OpenAI published two reports—an Enterprise Signals dashboard and a working paper—claiming enterprises are shifting from using ChatGPT for Q&A to executing agentic workflows, with 'frontier firms' adopting plugins, skills, and agents more broadly. Early-career employees reportedly use AI more than senior staff.

Koray Kavukcuoglu, previously DeepMind's CTO and Google's chief AI architect, is replacing cofounder Demis Hassabis as SVP of DeepMind, reporting directly to Sundar Pichai. He inherits oversight of Gemini model development, frontier AI research, and the Gemini app and developer teams, with Google having not released a frontier model since early 2026 while OpenAI and Anthropic have advanced.

China blocked Meta's December 2025 acquisition of Manus AI, the Chinese agentic AI startup that claimed a $100M run rate and had moved its HQ to Singapore. Manus will resume independent operations and will delete all user data generated since December 29, 2025 on August 24, 2026 — users must download before then to restore it afterward.

llama.cpp launched an official website at llama.app with a one-line install script, package manager support (Brew, Winget), and a local coding agent workflow via the pi-llama plugin that auto-discovers your served model with no API keys or config. The site lists supported hardware ranging from Apple Silicon to H100 clusters and highlights models like Qwen 3.6, Gemma 4, GPT-OSS, and Gemma 3.

India's Yulu, a Bengaluru-based electric two-wheeler subscription startup, raised $93M in Series C funding ($63M equity led by GEF Capital, $30M debt) at a ~$170M post-money valuation. The startup rents e-bikes weekly to gig delivery drivers, powers 750,000+ deliveries daily with a 50,000-vehicle fleet, and plans to scale to 200,000 bikes over two years, with 95% of revenue from gig-worker rentals.

Malaysia is positioning itself as a regional green investment destination ahead of COP31 in Antalya, Türkiye. Key milestones include the third NDC submitted in October 2025 with an economy-wide absolute emissions target (peak by ~2030, reduce 15-30 million tonnes CO₂e by 2035), the National Carbon Market Policy launched earlier this year, and Budget 2026 signalling carbon pricing for selected sectors. The National Climate Change Bill (RUUPIN) and Climate Change Authority Bill are in final preparation for Parliament.

A sponsored article by Holistic Enterprise argues Singapore SMEs should treat business loans as proactive growth tools rather than reactive lifelines. It frames the core cash flow problem as a timing mismatch—60-day client payment terms versus upfront supplier demands—and suggests arranging credit facilities before they're needed to negotiate better terms.

Malaysia's MyGOV AI chatbot relaunched in early August 2026 with agentic AI capabilities, nearly a year after the original was shut down for factual errors (e.g., calling Communications Minister Fahmi Fadzil a former Johor Menteri Besar). The new version can retrieve personal government records—JPJ and PDRM summons, passport expiry, travel restrictions, and unclaimed monies—after requesting IC number permission, though the title indicates it still gets some answers wrong.

Reserve Bank of India governor Sanjay Malhotra urged banks to use AI to approve loans for underbanked groups like gig workers and first-time borrowers by analyzing alternative data such as GST filings, utility payments, and digital footprints. He also advocated for AI voice interfaces in local languages to improve financial inclusion and early warning systems for default risk.

Google CEO Sundar Pichai announced Gemini has surpassed one billion monthly users, making it Google's fastest-growing product and the 14th to reach that milestone. The announcement coincides with a significant reorganization of Google's AI division, with Demis Hassabis stepping back and other researchers departing, while competitors have released more advanced models.

The CFTC invoked emergency authority to order prediction-market platform Kalshi to continue operating in New York, citing market stability concerns. The press release is a regulatory action by a US commodities regulator over a specific US-based trading venue.

A fake Wi-Fi hotspot attack was reportedly carried out on a Delta flight, with attendees of the DEF CON hacking conference suspected to be involved. The article text itself was not captured—only the headline and cookie consent boilerplate are available.

Malaysian Immigration has reportedly stopped issuing or renewing passports with validity exceeding 10 years, per a Lowyat.NET report dated August 2026. The article body was not available beyond the headline and site navigation.

OpenAI published a customer story describing how RingCentral rolled out ChatGPT Work and Codex company-wide via an 'AI-Native Challenge' sponsored by the Office of the CEO, aiming to let non-engineering staff build product features and infrastructure. RingCentral reports $2.6B annual revenue and claims AI tools compress the distance between idea and shipped feature across its Agentic Voice AI portfolio (AIR, AVA, ACE).

Anthropic rebranded the Claude Chrome side panel to 'Claude Cowork,' making browser sessions sync with desktop, web, and mobile apps so multi-step tasks carry across surfaces. Claude can see pages, click links, type text, and fill forms using your existing logins, targeting internal dashboards and vendor portals that lack API integrations. It's available on Max and Team plans now, rolling out to Pro over coming weeks, with an 'automatically approve' mode that lets Claude work without pausing for permission at every step.

Modular's Mojo programming language reached its 1.0 milestone, offering a Python-like syntax with Rust-like memory safety designed to unify AI workloads across GPUs, CPUs, and ASICs without vendor lock-in to CUDA or ROCm. Chris Lattner (creator of LLVM, Swift, MLIR) leads the project; Modular was acquired by Qualcomm in June 2026. The standard library ships under Apache 2.0 with LLVM exceptions, but the compiler itself is not yet open source—Modular says that may happen at Modcon next week.

Simon Willison highlights Sophie Alpert's internal policy on acceptable AI writing use by engineers, centered on the principle that there are no lossless transformations of natural-language text—every rewrite changes meaning, and an LLM lacking your mental model will lose information. Alpert's key rule: you must stand behind every idea and sentence in your docs, and it's unacceptable to tell a reviewer 'AI wrote that, just ignore it.'

Researchers found that OpenAI, Anthropic, and Google encrypted chain-of-thought reasoning blocks returned via their APIs could be replayed into weaker sibling models in the same family (which shared the same encryption key) and jailbroken into outputting the raw plaintext reasoning. Claude Haiku 4.5 was the easiest to attack using a prompt that asked it to transcribe reasoning verbatim inside a thinking-copy tag. All providers acknowledged the report and patched the issue.

The article title references Trump pushing Big Pharma to split the MMR vaccine into separate doses, with pharmaceutical companies reportedly opposing the idea. However, the provided article text contains only cookie consent and privacy policy boilerplate—no substantive article content is present.

CNBC's Jim Cramer says investors can gauge the market by tracking three things: bonds, oil, and Nvidia. He argues these serve as proxies for interest rates/Fed policy, inflation/geopolitical risk, and the health of the AI trade respectively. The 30-year Treasury yield is noted at around 5.2%.