AI Weekly Malaysia

OpenAI says API customers globally can now opt in to text watermarking for select models, but it remains off by default, and it will add an invisible textGrain watermark to eligible ChatGPT and Codex text output in the European Union over the coming weeks to meet EU AI Act machine-readable provenance rules. It is opening applications for a text watermark detector to approved researchers and expert organizations, plans to open-source the technology, and says textGrain matched or exceeded SynthID for text in evaluations while warning detection still has false positives and false negatives.

Denmark’s Central Person Register (CPR) was breached, with hackers stealing records on about 8 million citizens and residents, including people living abroad and the deceased, from a database that holds about 11 million records. The stolen data includes names, addresses, Danish social security numbers, and other information; the breach happened in September, was discovered on October 2, and was reportedly carried out by abusing a Danish company’s lawful access to search the CPR system.

Independent researchers posted preliminary findings about a fleet of AI agents apparently running on Tencent infrastructure and targeting Alibaba’s Amap map service. They detected the activity through traffic to the domain-scanning service URLquery, showing parallel queries for directions to entrances of places including a park, a zoo, and a hospital. The researchers resisted calling it a swarm because they saw no communication between the agents, and the activity appeared to side-step Alibaba’s API rules rather than do anything clearly malicious.

TechCrunch announced the five Startup Battlefield finalist judges for Disrupt 2026, where 200 selected startups compete and only 20 pitch on the Disrupt Stage on Oct 13–15. The judges each founded or co-founded the investment firm they lead; the excerpt names Stacy Brown-Philpot of Cherryrock Capital, which focuses on Series A/B software by Black and Latinx founders and lists Coactive AI and Vitable Health in its portfolio. After the final pitch, all five judges will hold a live AMA on the Builders Stage, and passes are discounted up to $100, with a second pass 50% off or group discounts up to 30%.

The Hacker News weekly recap leads with two actively exploited flaws: CVE-2026-88779 in Citrix NetScaler ADC/Gateway (CVSS 8.7, memory overflow causing denial-of-service, but only when the appliance is configured as a SAML service provider or identity provider), and CVE-2026-104286 in Fortinet FortiMail (CVSS 9.8, unauthenticated arbitrary file write via crafted HTTP/HTTPS requests, flagged by CISA for active exploitation). It also notes the arrest of two alleged ShinyHunters members and teases items on AI coding leaks and Spectre v2, but the provided text cuts off before those sections, so there are no details to summarize on them. The page also embeds a Headspace-sponsored webinar on AI governance, which is promotional rather than news.

Fatih Arslan's personal blog post tours the designer lamps in his home: an Artemide Tolomeo Mini (designed 1987 by Michele De Lucchi and Giancarlo Fassina, won the Compasso d'Oro in 1989), a Tizio Micro (Richard Sapper, 1972, whose arms carry the electricity and whose red details are Sapper's signature), and an Akari 1A made of washi paper (Isamu Noguchi, series started 1951). He notes none are cheap, that IKEA equivalents can cost about a tenth as much, and that vintage stores and fairs are good sources. The post drew 174 points and 79 comments on Hacker News.

Tom's Hardware reports a $40 discount on the AMD Ryzen 7 9800X3D, bringing it to $429 with a free MSI 240mm AIO cooler and a game. The article frames the chip as one of the fastest gaming processors around. It is a consumer CPU deal, not an AI/ML, developer-tooling, startup, or Malaysia/SEA infrastructure update.

The retrieved page contains no article content — only Condé Nast/Ars Technica consent and cookie-preference boilerplate (opt-out toggles for targeted advertising, a privacy email, and a phone number). The headline claims 'AI glasses face their first major government crackdown,' but no government, regulator, product, date, or enforcement detail is present in the supplied text. Nothing about the actual crackdown can be verified from this excerpt.

Cerebras (CBRX) shares rose about 6% in premarket Monday to roughly $177 after OpenAI CEO Sam Altman posted on X that Cerebras is a "close partner" with a "deep engagement pushing on the frontiers of speed." The bounce followed a 20% single-week drop after it was revealed OpenAI would power the "Ultrafast" mode for GPT-6.1 Sol with Nvidia GPUs instead of Cerebras chips. Cerebras IPO'd on Nasdaq in May 2026 and the stock is now down nearly half from its highs, with the piece attributing the swing largely to Altman's Friday post.

Oracle has reportedly leased about 100,000 advanced AI chips to Tencent across several Southeast Asian data centers over five years, in a deal estimated at roughly $7 billion, or about $1.60 per chip-hour with about 30% upfront, according to the Financial Times. The estimated rate is around 43% below the roughly $2.80 per GPU-hour cited for standard H100 rentals, even as Tencent's James Mitchell said compute rental prices are climbing on an August 12 earnings call. Neither company has commented, and the FT says such leases are legal under current U.S. rules; the specific chip types were not disclosed.

GrapheneOS says it has a partial port to the Pixel 11 after a week of work but cannot complete it because the device lacks ARM hardware memory tagging (MTE) support in software, firmware, and near certainly hardware, suggesting Google cut the feature to save money. GrapheneOS has used hardware MTE across its base OS, kernel, and hardened_malloc since the Pixel 8 launched with MTE in October 2023, while Android 16 Advanced Protection Mode enables it for only a few processes and Apple's iPhone 17 MIE is always on. GrapheneOS may skip the Pixel 11 if the security standard is not met; the Hacker News thread has 211 points and 115 comments.

Cloudflare reports that one year after setting a 2026 goal to hire as many as 1,111 interns, it has hosted 750 internships across 48 teams in nine offices, including Singapore. Interns shipped work to internal teams and customers, with examples including an AI-assisted ISO compliance pipeline, Startup Program credit-management API/dashboard/migration tooling, and background-verification workflow improvements. Cloudflare says AI helped interns map unfamiliar codebases and prototype faster, while managers and mentors still set direction and reviewed decisions.

Cloudflare's Birthday Week 2026 wrap-up lists 46 announcements across five themed days (Sept 28 - Oct 2), covering open source, application security and post-quantum, agentic-Internet economics, Developer Platform expansion, and performance/accessibility. Named launches include cf, an agentic CLI that mirrors the Cloudflare API with JSON-first output and typed configuration; Forge, an open-source CI pipeline that generates SDKs, CLIs and docs from API definitions; and EmDash, an Astro-based serverless CMS that runs plugins in isolated Worker sandboxes with explicitly approved capabilities. Cloudflare also states that automated traffic surpassed human activity for the first time, and notes interns contributed to EmDash, post-quantum visibility, and Protected Quick Tunnels.

Tom's Hardware reports that 32GB has overtaken 16GB as the most common RAM capacity in gaming PCs, based on Steam's hardware survey, and that AMD has reached a record 48.4% CPU share, closing in on Intel. The headline frames both shifts as happening despite an ongoing memory chip shortage. The supplied article body is almost entirely subscription and newsletter boilerplate, so no survey date, sample size, pricing, or methodology is available in the text.

A modder has brought original Xbox emulation to a jailbroken PS5 via XPSemu, with the article headline claiming it runs Halo 2 and Forza. Tom's Hardware also notes that PS5 emulators now outnumber the console's 15 exclusives. The available text is mostly paywall and membership boilerplate, so there are no technical details, compatibility lists, performance numbers, or release dates.

CNBC's Morning Squawk for Monday, Oct 5, 2026 leads with oil: the UK's Maritime Trade Operations Centre reported at least two vessels struck by unknown projectiles near Oman and Iran — one on Friday, one on Sunday — as Iran holds conditions for reopening the Strait of Hormuz, and attacks on ships in the passageway have run for weeks. The rest of the newsletter is teased only by headline: Chick-fil-A growth plans, AI wearables, and Gen Z sports betting. The provided text cuts off mid-sentence in the G7 price-cap item, so no detail is available on the AI wearables or Chick-fil-A segments.

Import AI 475's excerpt covers Toby Ord's analysis of AI swarms as a new form of inference-scaling. Ord notes a 4-agent swarm needed about twice the total tokens to match performance but half the tokens per agent, potentially doing the same task in half the time; scaling to 10x agents gives only 10λ x performance (3x-5x), not 10x. The issue title also mentions Google DeepMind watermarks biology and the AI science economy, but the provided text only details the swarm discussion.

Tom's Hardware reports that Amazon is ending secret data center agreements and pledging $1 billion to host towns, with AWS promising 30,000 home efficiency retrofits, set against roughly 100 proposed data center bans. The excerpt supplied is almost entirely site navigation and subscription boilerplate, so the concrete terms of the pledge, which municipalities are affected, and the timeline are not verifiable from the text provided.

Reports cited by Tom's Hardware say a Google AI data center project in Finland is under investigation after roughly 420 football fields of forest were cleared, with trees removed before a mandatory environmental impact assessment was carried out. The piece is dated 2026-10-05, but the retrievable text is almost entirely site navigation and paywall boilerplate, so it carries no named officials, no regulator, no site name, no timeline, and no Google response.

In this episode of How I AI, OpenAI product staffer Kath Korevec demos ChatGPT Sites live at OpenAI DevDay, showing internal tools that adapt to each person on a team, built from Slack, Notion, and calendar data. She describes an incident command site her OpenAI team built on live Slack and Notion connectors, says the connector ecosystem now includes around 60 integrations, and references Plugin Insights, MCP plugin hosting, and a widget experiment for bringing inference into a site. The show notes give timestamps and tool links (chatgpt.com/sites, awesomesites.ai) but no pricing, limits, or the specific Codex phrase for wiring connectors.

Safeworld, founded by Carnegie Mellon Safe AI lab director Dr. Ding Zhao alongside start-up executive Kyle Wong and ML engineer Simo Rachidi, emerged from stealth with a seed round of more than $12 million led by Shine Capital and a16z Speedrun, with Box Group, Carnegie Mellon University Endowment, Innovation Endeavors and SV Angel participating. Its product evaluates robotic control systems in simulations populated with realistic human models, aimed at the problem that generative-AI-driven robot controllers are probabilistic rather than predictable like traditional algorithms. The article notes robots' unstructured environments and differing facility safety standards make this harder than the equivalent problem for autonomous vehicles, and a16z Speedrun partner Jonathan Lai is quoted arguing the industry safety standard should be built now, before household incidents occur.

The Hacker News published the first of three GitGuardian-sponsored articles on credential-layer security, citing GitHub COO Kyle Daigle saying the platform went from roughly 1 billion commits across all of 2025 to 2.9 billion commits in August 2026 alone — an annualized pace of over 14 billion — while GitHub engineering says it has moved from planning for 10x scale to designing for 30x as agentic development accelerates. GitGuardian says it detected 28.65 million new hardcoded secrets in public GitHub commits in 2025, up 34% year over year, with leaked credentials tied to AI services up 81%. The article frames GitGuardian's Detect / Remediate / Prevent pipeline as the answer, and is explicitly the first of three vendor articles explaining its mission.

The headline claims a former OpenAI safety employee left the company saying its safety culture is broken, citing a failed kill switch and a July HuggingFace hack. However, the supplied page text is almost entirely Tom's Hardware subscription prompts, navigation, and newsletter boilerplate — it contains no named source, no dates, no technical detail, and no description of either incident. As provided, the only concrete facts are the headline assertions themselves.

A solo project ported the PS5-exclusive Wolverine game to PC using AI assistance, and the result is described as buggy. The source code used reportedly came from a 2023 Sony ransomware attack rather than any legitimate release. The article body itself is largely subscription and newsletter boilerplate, so the concrete technical detail is limited to the headline claim.

Nozomi Networks reports a spike, starting around September 5, 2026, in exploitation attempts against CVE-2021-35394 (CVSS 9.8), a critical RCE in the Realtek Jungle SDK, with some attempts delivering a botnet called Cling. The Cling sample bundles exploit logic for at least eight router/DVR flaws (including CVE-2014-8361, CVE-2016-10372, CVE-2016-20016, CVE-2023-26801, CVE-2023-41011, CVE-2024-3721 and CVE-2025-34037), persists via /root/.cling and /usr/local/bin/.cling appended to /etc/inittab, /etc/init.d/rcS and /etc/rc.d/rc.boot, and uses a single-instance lock on port 33957 with SO_REUSEADDR. Its distinguishing trick is repurposing ordinary STUN traffic and public STUN infrastructure as command-and-control, so malicious traffic resembles legitimate NAT-traversal activity.