AI Weekly Malaysia

PromptArmor disclosed a zero-click data exfiltration vulnerability in Atlassian Rovo AI on May 23rd; after 2+ months with no fix from Atlassian, they went public. The attack uses indirect prompt injection via uploaded files or external data to manipulate Rovo's URL retrieval tool into sending Jira tickets and Confluence docs to an attacker-controlled URL, and it works even when an organization has disabled Rovo's web search setting.

Disney is interested in "price-sensitive" streaming customers.

The applications are in, and the TechCrunch Startup Battlefield team made their decisions!

The V4 Superchargers will show up in the Tesla nav app and have NACS and CCS1 plugs.

A bug in how Apple implements its Private Relay feature, which in theory masks users’ IP addresses from the sites they visit, can reveal users’ real IP addresses.

Deno has released celld, an open-source daemon that runs Cloudflare Workers and Durable Objects on your own machines. Each object is its own SQLite database replicated to an S3-compatible bucket, with nodes coordinating solely through that bucket—no control plane, consensus, or membership protocol required. Idle cells hibernate to near-zero resource usage, and the bucket serves as the durable source of truth while nodes remain replaceable.

It's the company's first commercial market after Zoox started offering free rides to the public in parts of Las Vegas and San Francisco less than a year ago.

A critical Langflow flaw allowing RCE on default deployments is being exploited, says the CISA

Company noted for building quantum annealers now also making gate-based hardware.

Jeff Dean, Sanjay Ghemawat, Quoc Le, and Oriol Vinyals have launched Discovery Loop, a venture aiming to automate entire experimental loops in scientific and engineering research using frontier AI models and large-scale compute. The initial focus is automating machine learning research and engineering itself, using their own automated ML capabilities as their first customer before expanding to other scientific domains. The long-term ambition targets NAE Grand Challenges like better medicines, clean water, and solar energy.

Demis Hassabis is stepping aside as CEO of Google DeepMind, moving to a Chairman role. The Axios article provides no further substantive detail beyond the leadership change announcement.

Google announced leadership changes at DeepMind with Demis Hassabis moving from CEO to Chair and Jeff Dean departing, per the HNS title. The article text itself is almost entirely Google blog navigation boilerplate with no substantive detail on the changes, their rationale, or their impact.

Article URL: https://www.nytimes.com/2026/08/05/technology/google-researchers-ai-startup.html Comments URL: https://news.ycombinator.com/item?id=49184746 Points: 297 # Comments: 9

Shopify says AI isn’t cannibalizing search traffic the way it has for publishers. Instead, AI-driven traffic and orders to Shopify stores tripled year over year in Q2.

The Investing Club holds its "Morning Meeting" every weekday at 10:20 a.m. ET.

But bobbing bit barn may be becalmed by state governor's moratorium on connecting to the grid

Hark claims that its browser use agent is faster and cheaper than competition.

Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access to artificial intelligence (AI) models on underground cybercrime forums and messaging platforms. One such service, Poison Claude, claims to offer access to Anthropic's large language models (LLMs), including Opus 4.8, Opus 4.7, Opus 4.6, and Sonnet 4.6. "Advertisements for Poison Claude

Assistant will disappear, leaving only Gemini for voice control in the coming weeks.

Article URL: https://weli.dev/blog/the-valley-of-webhooks/ Comments URL: https://news.ycombinator.com/item?id=49184216 Points: 221 # Comments: 92

Police in Wisconsin used Flock's license plate reader network to track a man's interstate travel to Michigan (where marijuana is legal) and back to Wisconsin (where it is not), then cited his frequent Michigan travel as probable cause to search his car for weed. Court records show the man was ultimately convicted only of marijuana possession; the bail jumping charge was dismissed.

Two security flaws in Paperclip could let attackers execute commands on a network server or a developer's computer. Paperclip is an open-source control plane for teams of artificial intelligence (AI) agents, and both paths rely on importing a malicious agent and starting it. A third flaw could expose sensitive data and control-plane details through application programming interface (API) routes

Redmond wants results from Copilot, not impressive-looking consumption figures

This marks the official launch of Zoox's commercial operations.

On our new Real World AI stage, we’ll be focusing on the intersection between the digital and physical, and all the ways we’ll continue to see a blending of the two.