AI Weekly Malaysia

Anthropic rebranded the Claude Chrome side panel to 'Claude Cowork,' making browser sessions sync with desktop, web, and mobile apps so multi-step tasks carry across surfaces. Claude can see pages, click links, type text, and fill forms using your existing logins, targeting internal dashboards and vendor portals that lack API integrations. It's available on Max and Team plans now, rolling out to Pro over coming weeks, with an 'automatically approve' mode that lets Claude work without pausing for permission at every step.

Modular's Mojo programming language reached its 1.0 milestone, offering a Python-like syntax with Rust-like memory safety designed to unify AI workloads across GPUs, CPUs, and ASICs without vendor lock-in to CUDA or ROCm. Chris Lattner (creator of LLVM, Swift, MLIR) leads the project; Modular was acquired by Qualcomm in June 2026. The standard library ships under Apache 2.0 with LLVM exceptions, but the compiler itself is not yet open source—Modular says that may happen at Modcon next week.

Simon Willison highlights Sophie Alpert's internal policy on acceptable AI writing use by engineers, centered on the principle that there are no lossless transformations of natural-language text—every rewrite changes meaning, and an LLM lacking your mental model will lose information. Alpert's key rule: you must stand behind every idea and sentence in your docs, and it's unacceptable to tell a reviewer 'AI wrote that, just ignore it.'

Researchers found that OpenAI, Anthropic, and Google encrypted chain-of-thought reasoning blocks returned via their APIs could be replayed into weaker sibling models in the same family (which shared the same encryption key) and jailbroken into outputting the raw plaintext reasoning. Claude Haiku 4.5 was the easiest to attack using a prompt that asked it to transcribe reasoning verbatim inside a thinking-copy tag. All providers acknowledged the report and patched the issue.

The article title references Trump pushing Big Pharma to split the MMR vaccine into separate doses, with pharmaceutical companies reportedly opposing the idea. However, the provided article text contains only cookie consent and privacy policy boilerplate—no substantive article content is present.

CNBC's Jim Cramer says investors can gauge the market by tracking three things: bonds, oil, and Nvidia. He argues these serve as proxies for interest rates/Fed policy, inflation/geopolitical risk, and the health of the AI trade respectively. The 30-year Treasury yield is noted at around 5.2%.

Tencent's Hunyuan3D team released WorldClaw, an open-source system that turns a single open-ended text prompt into an explorable, editable 3D world where terrain and every object remain as separate editable instances. It uses agentic planning to maintain global terrain coherence while selectively generating rich local detail, with objects produced by 3D generative models and scatter assets built through 3D coding. The repo and arXiv paper are publicly available, with eleven demo worlds ranging from a snowline village to a tropical island.

Signal introduced Automatic Key Verification (AKV), which uses a new open-source key transparency server with a log tree ledger and prefix tree index to detect if someone has tampered with public encryption keys to intercept messages. Users can tap 'Verify automatically' on a contact's safety number screen to get a green checkmark confirming the key matches Signal's key transparency system. A key caveat: you need your contact's phone number for this to work.

Bloomberg reports that Phia, a shopping startup co-founded by Phoebe Gates and Sophia Kianni, knowingly engaged in 'cookie stuffing'—taking affiliate commissions for purchases it didn't drive—as far back as December, contradicting earlier claims it was unaware. Leaked Slack messages show founders and engineers discussed the practice, which was a purposefully built feature, not a bug. Cookie stuffing reportedly made up a significant portion of Phia's sales, and daily revenue dropped sharply after the practice stopped.

Accel closed an oversubscribed $550M India fund within weeks, just 19 months after its previous $650M India fund, despite still having over 55% of that earlier fund uninvested. The firm plans to begin deploying the new fund in 2027 and sees India's AI opportunity in the application and infrastructure layers rather than competing with foundation model companies like OpenAI.

Microsoft's August 2026 Patch Tuesday fixed 421 vulnerabilities, down ~200 from the prior month but described as the new norm under AI-assisted disclosure. One of them, CVE-2026-68820, was already exploited as a zero-day by North Korea's Lazarus Group since early June—a use-after-free in the Windows Ancillary Function Driver for WinSock allowing SYSTEM-level code execution by a locally authenticated attacker with no user interaction.

The article URL points to an Ars Technica story about Romanian forces destroying Russian drones drifting near a vital European offshore gas site, but the fetched content contains only cookie consent and privacy policy boilerplate with no substantive article text.

An internal US Defense Department memo dated August 4, 2026, drafted by Deputy Secretary of Defense Stephen Feinberg, directs officials to purchase up to $243.9 million in services from Palantir without competitive bidding through March 31, 2027, with additional funding options extending to December 31, 2028. The memo says Palantir is helping the DoD understand delays in munitions and vehicle production and maintenance. A POGO director noted that the DoD is generally required to use competitive contracting unless a written justification is provided under 10 USC 3204.

OpenAI-backed Chai Discovery, valued at $4B and just 2 years old, closed four major AI tools deals with pharma companies at JPMorgan's January pharma conference. Cofounder Matt McPartlon and product lead Neil Patil explain that AI drug design tools have crossed a trust threshold, enabling capabilities like bi-specific antibody design that were previously impractical through lab-based discovery alone.

Nvidia has lined up $500 billion in financing through agreements with six major Wall Street firms (BlackRock, Blackstone, Apollo, KKR, Brookfield, Goldman Sachs) to fund AI infrastructure buildout, treating chips as long-term financial assets. Analysts warn that if China floods the market with low-cost compute, rapid hardware depreciation could crash the collateral values backing these loans, pushing investor yield demands to 11-17%.

The provided article text contains only cookie consent and privacy policy boilerplate from Ars Technica, not the actual article content about Chrome's account takeover protection. No substantive details are available.

A federal judge has allowed a $1.4 trillion lawsuit by multiple US states against Meta to proceed to trial, denying Meta's motion to dismiss. The actual article content was not available—only cookie consent boilerplate was captured.

Tom's Hardware reviews the Razer Naga V3 Pro, a 23-button gaming mouse priced at $179.99, calling it a solid upgrade over the Naga V2 Pro, especially if you already own Razer's HyperPolling Wireless Dongle or Mouse Dock Pro. The review awards it an Editor's Choice.

Microsoft's August 2026 Patch Tuesday closes 398 CVEs (62 Critical), including CVE-2026-68820, a use-after-free in afd.sys (Windows kernel WinSock driver) under active exploitation that escalates privileges to SYSTEM. Check Point Research attributes the zero-day to Lazarus's Operation Dream Job campaign. Four unauthenticated 9.8-CVSS remote code execution flaws affect Windows DNS Server (described as wormable by ZDI), Windows Deployment Services, Microsoft's QUIC implementation, and HPC Pack.

Uber sold its entire stake in Serve Robotics, the autonomous sidewalk delivery robot company that spun out of Postmates in 2021. Serve's CEO Ali Kashani disclosed on the August 6 Q2 earnings call that delivery volume through Uber had declined for the first time after 17 consecutive quarters of growth, citing lower-than-expected robot utilization and 'differing views' on how to scale the shared autonomous fleet.

An ngrok blog post by Annie Sexton walks through compression fundamentals—minification, run-length encoding, and the three organs of modern compressors (transforms, models, entropy coders)—to argue that compressors and LLMs are solving the same underlying problem: prediction. The piece uses interactive code examples to show how redundancy reduction maps to predictive modeling.

Google says Gemini has reached 1 billion users faster than any other product in the company's history, making it their fastest-growing product ever. The article body was not accessible beyond cookie-consent boilerplate, so details on methodology, timeframe, or product breakdown are missing.

Brad Lightcap, who joined OpenAI in 2018 and served as COO for four years, announced his departure to 'start something new.' He had already been moved to a 'special projects' role in April, with Chief Revenue Officer Denise Dresser taking over most of his responsibilities.

The FBI issued a public alert warning that cybercriminals are hacking social media accounts of adults and children to steal intimate images, relying on social engineering, brute-forcing leaked passwords, fake customer-service impersonation, and phishing pages mimicking social media login screens. Rachel Tobac, CEO of SocialProof Security, noted the alert likely signals rising incidents, particularly targeting young boys, and described it as a public health issue given victims sometimes self-harm.

Palo Alto Networks Unit 42 discovered Kimwolf v7, an Android/IoT botnet variant active since mid-2024 that now uses HTTP/2 flood attacks with complete browser fingerprints via the nghttp2 library, making DDoS traffic indistinguishable from legitimate browsing. The botnet targets Android TV boxes with ADB enabled on port 5555, uses Ethereum Name Service (ENS) and Tor .onion for resilient C2, and has split propagation into a separate external loader while the core binary handles DDoS and proxy relay.