AI Weekly Malaysia

A US House member is pushing the government to enforce Biden-era export controls that would require chipmakers to conduct adequate due diligence on their customers. The article itself is mostly boilerplate with minimal substantive detail beyond the headline.

Tom's Hardware highlights a deal on a Hoto 25-piece electric screwdriver set at $30 (40% off), featuring a 1,500 mAh battery and 25 bits marketed at PC builders and hobbyists. The article body is almost entirely Tom's Hardware membership boilerplate with no substantive review or testing data.

Nvidia is partnering with six investment firms to create $500 billion in AI infrastructure funds, aimed at providing long-term financing at attractive rates for AI buildout. The article text itself contains almost no further detail beyond the headline and a one-line description.

Japanese authorities arrested the initial seeder on Nyaa, a popular anime torrenting site, using a new identification tool that anti-piracy group claims works without monitoring the torrent swarm. The article text provided is almost entirely site boilerplate with no technical detail on how the tool actually works.

A modder attached a Radeon RX 9070 XT as an external GPU to a Steam Machine, achieving over 100 FPS in Crimson Desert on High settings. The setup involved relocating the boot drive to a USB-C port and using an M.2-to-OCuLink adaptor with an eGPU dock.

Researchers Alejandro Hernando and Borja Martinez demonstrated at DEF CON 34 that Windows 11's Plug and Play auto-install can be chained into full SYSTEM execution on a fully updated machine. The physical path emulates a Sierra Wireless device to install SwiService.exe, abuses its SetDNS primitive, then emulates a Sony FeliCa reader whose co-installer fetches config over plaintext HTTP with a path-traversal flaw to plant a DLL in System32. A remote variant forges synthetic USB traffic over RDP using a phantom Intel RealSense device and a CRYPTBASE.dll search-order hijack, though Microsoft notes RDP USB redirection is not enabled by default.

McKinsey argues that US power companies should overbuild rather than underbuild grid capacity for datacenter demand, since even if AI compute growth slows, the infrastructure won't be stranded—EVs and industrial electrification will absorb it. Datacenters are projected to drive 75% of US power demand growth over the next decade, requiring ~30 GW of additional capacity annually, with a nationwide gap of 30-55 GW by 2030. Notably, 71% of organizations report 'negative implementation outcomes' from AI, and parts of the ecosystem show bubble-like characteristics.

Researchers demonstrated a laser wireless charging system for drones using an improved receiver that converts laser energy at 38.49% efficiency, with nanocrystalline material handling thermal management. The approach could theoretically keep drones airborne indefinitely without returning to base for battery swaps.

Walmart is offering a $600 discount on the Gigabyte Aero X16 gaming laptop with an RTX 5060, 16GB RAM, and 1TB SSD, bringing the price to $1,099. The article is a retail deal listing with no technical analysis or broader industry context.

ASSET Research Group demonstrated 'GhostSplice,' a technique where a malicious MCP server splits a secret-exfiltration request across tool descriptions and tool results so no single fragment looks harmful, but the AI coding agent stitches them together in context and sends sensitive files like .ssh/id_rsa, .env, and customers.csv to the attacker. The same model can refuse in one coding client but comply in another, depending on the client's safety controls. The attack requires the developer to have already connected the malicious MCP server.

Ben Thompson draws an extended analogy between Jay Cooke's 1870s railroad bond financing—where retail investors funded an endless capital-hungry buildout that collapsed in the Panic of 1873—and Nvidia's current position atop a massive AI infrastructure capex cycle. The article frames Nvidia's dominance as structurally risky: its revenue depends on a small number of hyperscalers spending unprecedented sums on GPUs, and if that capital cycle tightens or AI revenue doesn't materialize fast enough, the whole stack could unwind similarly to the railroad bankruptcies.

OpenAI announced that its Daybreak cybersecurity models are now available through Amazon Bedrock on AWS. Daybreak Blue provides access to general-purpose frontier models including GPT-5.6 Sol with safeguards for defensive security work, while Daybreak Red offers purpose-trained models for authorized vulnerability research, exploit validation, and security testing.

The US Department of Transportation ran a recruitment drive targeting gamers for Air Traffic Controller positions, hitting 94% of its hiring goal in record time with salaries up to $155,000. The article text itself is almost entirely boilerplate navigation and subscription prompts with no substantive body content beyond the headline.

OpenAI has launched ChatGPT Ads in the UK, Mexico, Brazil, Japan, and South Korea as of August 11, 2026, with plans to expand to more markets later in the year. The ads are positioned as supporting free access without altering ChatGPT's answers, and businesses can sign up at openai.com/advertisers/ for updates.

Trump Media launched Truth API in early August, offering paying customers faster access to market-moving Truth Social posts. Over 10 firms—mostly high-frequency traders—are paying $60,000–$100,000/month for the feed, which the company calls a 'meaningful' new revenue stream amid a $238M quarterly loss.

British Transport Police is expanding its live facial recognition (LFR) trial into London Underground stations, scanning passengers' faces in transit hubs. The HN discussion drew 503 comments and 376 points, indicating strong public debate around surveillance deployment.

Researchers from the University of Birmingham and Fuzzware presented a toolkit called CATANA at USENIX WOOT that exploits proactive SIM functionality—specifically the RUN AT command—to hijack cellular modems. Testing 26 devices (18 smartphones, 8 IoT modems), they found 9 exposed an AT command interface to the SIM, enabling code execution, file theft, denial of service, and forced 2G downgrades. Demonstrated attacks include code execution on an Autel EV charger via a Quectel EC25-AFX module and 198 AT commands accessible on an Oppo Reno14 F 5G, including one that forced a stubborn downgrade to 2G that couldn't be reversed by toggling airplane mode or changing network settings.

A DIY modder built a computing device powered by a Stirling engine (heat engine) using an 80 MHz ESP32 processor that runs Tetris, Snake, and Pong on just 150 milliwatts. The project demonstrates ultra-low-power computing paired with thermomechanical energy conversion.

Gunra ransomware, a Conti-derived operation active since April 2025 with 51 listed victims, gains initial access by exploiting Fortinet FortiOS/FortiProxy (CVE-2025-24472) and Schneider Electric PowerLogic P5 (CVE-2024-5559) flaws, then deploys double-extortion using Salsa20/ChaCha20 encryption. The group launched a formal RaaS affiliate program in January 2026 with Windows and Linux lockers, though the Linux builds reportedly contain a catastrophic cryptographic weakness. Most victims are in South Korea, Brazil, Spain, Thailand, and Hong Kong, with targets spanning healthcare, financial services, and government sectors.

Huawei Malaysia confirmed the MatePad Air 2026 launches locally on 18 August 2026, with an RM100 deposit preorder scheme yielding an RM500 rebate and bundled freebies worth RM4,003, including a Smart Magnetic Keyboard, M Pencil Pro, wireless mouse, a 1-year WPS AI subscription, and AI-powered Huawei Notes. The tablet upgrades to a 12-inch 2.8K OLED PaperMatte display (144Hz, 1,200 nits), a 10,100mAh battery, and comes in Airy Blue, White, or Sakura Pink, with European pricing starting at EUR849 (~RM3,896).

France is banning unsolicited telemarketing calls starting August 11, 2026, as reported by Le Monde. The article text itself is largely inaccessible behind the paywall, with only navigation boilerplate visible.

This HPE-sponsored Register article argues hybrid cloud fails when organizations treat it as disconnected environments with separate provisioning, security, monitoring, and cost models rather than a unified operating model. It advocates a 'workload-first' approach: placing workloads based on performance, latency, data sensitivity, compliance, sovereignty, resilience, sustainability, AI readiness, and cost, then managing them consistently across environments. HPE positions itself as the vendor to help assess estates and apply this consistent operating model.

NUS and OpenAI announced a strategic collaboration giving all NUS students, faculty, and staff access to ChatGPT Edu and Codex with enterprise-grade security. A survey of 500+ Singapore university students found 94% use AI several times weekly, 55% daily, and 35% have already built an AI agent for personal or academic use.

Attackers shut down a steam turbine and water treatment system at a Polish CHP plant by pivoting through a private cellular APN from a compromised wind farm to a WAGO controller with default admin credentials. CERT Polska, disclosing the December 2025 incident on August 8, called it the first real-world observed use of a private APN as an attack vector into industrial control networks. No CVE was identified and no single patch exists; the root causes were permissive client-to-client APN traffic, default credentials, and exposed management interfaces.

Honor Malaysia announced the Honor Pad 20 series will launch locally soon, featuring a 12.1-inch IPS LCD, Snapdragon 7 Gen 3, 8GB RAM, 128/256GB storage, MagicOS 10.0, six speakers, and a 10,100mAh battery with 45W charging. Honor has held the #1 Android tablet spot in Malaysia for 27 consecutive months (Q2 2024–Q2 2026) with 32% market share per IDC. Local pricing and launch date are unconfirmed.