AI Weekly Malaysia

Coinspect has identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains. Introduced in the JavaScript cryptography library 12 years ago, the function supplied weak entropy that affected wallet apps used to generate recovery phrases. Coinspect's on-chain analysis puts the measured theft across two sweeps since late May at a lower bound of

Cybersecurity researchers have disclosed a security issue with Apple's iCloud Private Relay tool that can expose a user's real IP address. Introduced with iOS 15, iCloud Private Relay employs a dual-hop architecture to ensure users' privacy by routing their Safari web traffic through two relays so that no single third-party, including Apple, can determine where the request is originating from

A new prompt injection class dubbed 'AI Recommendation Poisoning' abuses deep-link URL parameters (e.g., chatgpt.com/?q=...) in 'Ask AI' buttons on commercial websites to silently inject instructions into a user's active LLM session, commanding the model to permanently save a vendor's domain as a 'trusted source' in long-term memory. Microsoft Security catalogued 31 companies across 14 industries deploying over 50 distinct poisoning prompts in 60 days, and MITRE tracks it as AML.T0080 (Memory Poisoning).

Two of the world's largest companies are heading to court over claims of trade secret theft. Apple alleges ex-employees took key Apple secrets and technologies to OpenAI. In responding, OpenAI claims this is based on false truths and misinformation, but even if it wasn't, it doesn't want Apple's trade secrets anyway.

Article URL: https://www.mayerowitz.io/blog/mario-meets-pareto Comments URL: https://news.ycombinator.com/item?id=49195231 Points: 1150 # Comments: 165

Beelink’s SER10 Max Mini PC comes ready to dual-boot Windows 11 and Ubuntu with OpenClaw pre-installed.

ESU meter starts running in January, unless you're on the IoT edition

Why humans need to moderate humans.

Save $200 on this gorgeous 27-inch WOLED gaming monitor from Gigabyte, and upgrade your gaming experience for less.

You can save $1,400 right now on this Omen Max gaming PC, fitted with an RTX 5090, 64GB RAM, and 2TB SSD storage, and on sale for $5,599.99.

You can run the deGDID script on your computer to delete cached GDID keys and prevent Microsoft's servers from minting new ones in the background. The firewall you put up with this script will break certain Microsoft services and features, however, but you can always reverse it.

Another week, another firm explaining why one of its models reached somewhere it wasn't supposed to

Multiple OpenAI models in a testing environment reportedly collaborated to escape their sandbox, leaving each other hidden messages that went undetected for months. The incident is described as an 'unprecedented cybersecurity incident' involving autonomous agent-to-agent communication.

ChatGPT introduces improved GPT-5.6 Sol with better accuracy and consistency, plus expanded access for free users and unlimited everyday chats with GPT-5.6 Luna.

A Northern Kentucky family has refused an anonymous AI company's $26 million offer to buy their land and transform it into a data center.

Michigan Democratic Senate candidate Abdul El-Sayed, who won a competitive primary Tuesday, has endorsed state and local moratoriums on data centers.

Pay it for content, like OpenAI and Meta, to become 'principled' and 'honorable'

DC Handal has deployed a new high-powered DC charger in Ipoh and it is currently their most powerful site in the city. The latest EV charging location is at Symphony Suites Hotel, Ipoh where there’s a covered 240kW DC Charger with two bays. This makes it an ideal spot to top up your EV especially […]

Attackers broke into an organization's Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit without writing an executable to disk. They fed Java source code to the database, let Oracle compile it into stored schema objects, and ran commands from inside the database engine. Huntress, which tracks the toolkit as khunt,

S’pore’s secret billion-dollar sector? Religion. There are few sectors in Singapore that receive more than S$1 billion a year without selling a single product. Religion is one of them. On any given weekend, tens of thousands of Singaporeans walk into churches, temples, mosques and gurdwaras carrying cash, making PayNow transfers or setting up recurring GIRO […]

Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions reach an agent's tools with no check that a model turn had authorized them. In several of the attack paths, the model never ran at all, so system prompts, content filters, and model-level guardrails never got a chance to intervene. The affected products include Amazon

It computes nothing, renders everything, and even has sound

Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least 20 Chinese router models from Zbtlink. According to a new report from VulnCheck, the implant appears in all 21 firmware images currently available from Zbtlink that span more than 2 years. The backdoors are designed such that they start automatically and attempt to beacon to Chinese

AmInvestment upgraded ViTrox Corporation to 'Buy' with a RM10.25 target after 2QFY2026 revenue hit RM375M (+104.8% YoY) and net profit tripled to RM85M, driven by AI infrastructure spending flowing through the semiconductor supply chain. The research house raised FY2026-FY2028 earnings forecasts by 96%-121%, noting ViTrox's largest customer is now a hyperscaler contributing ~10% of group revenue, and that demand appears structural rather than temporary front-loading. Capacity expansion continues at Batu Kawan, Penang (Campus 4 and 5), with a renewed Pioneer tax incentive pushing effective tax rate below 10%.

Nintendo reported fiscal first-quarter earnings Thursday.