AI Weekly Malaysia

Form Energy raised $750M to scale manufacturing of its iron-air batteries in West Virginia, which can discharge for up to 100 hours versus the few hours typical of most grid storage. Google is buying a 30GWh Form battery for ~$1B to power a Minnesota data center, and Crusoe ordered 12GWh, driven by AI data centers expected to quadruple U.S. electricity use by 2035. The batteries use iron instead of lithium/cobalt/nickel, with 80% of materials sourced from the U.S. to reduce China dependence.

Why: If you're building AI infrastructure or SaaS with heavy compute needs, energy availability and cost are becoming the binding constraint, not GPU supply. Malaysia's own data center boom (especially Johor) faces the same grid-capacity pressure this article describes for the U.S. — founders scaling compute-heavy products should factor multi-day power storage and renewable intermittency into long-term cloud cost projections, since hyperscalers will pass these energy costs through.

Sandbar, the startup behind the voice-enabled ring 'Stream,' has raised $36 million (including a $23M Series A led by Adjacent and Kindred Ventures) on a bet that push-to-talk, human-controlled wearable AI can succeed where always-on devices like pins and pendants failed. Co-founder and CEO Mina Fahmi, previously at CTRL-labs (acquired by Meta in 2019), argues that 'social acceptability' and custom hardware—not reskinned off-the-shelf devices—are what it takes to break voice wearables out of enthusiast circles.

Why: If you're building voice or agent interfaces, Fahmi's push-to-talk vs. always-on design choice is a concrete data point on user trust and social friction—worth considering when deciding whether your own voice features should default to passive listening or explicit user activation. The $36M raised also signals that investors are still funding consumer AI hardware despite the Humane Pin and similar failures, which is relevant context for founders evaluating hardware-vs-software bets.

The UK's criminal records office (ACRO) was reprimanded by the ICO after attackers maintained persistent access to its Kentico CMS v12.0.0 for over seven months (Aug 2022–Mar 2023), potentially exposing data on ~11,000 people. The root cause was running an unpatched CMS from September 2019 to March 2023, compounded by a miscommunication where the managed service provider didn't learn patching was its responsibility until February 2020 and still didn't actively monitor for vulnerabilities.

Why: If you outsource infrastructure or CMS management to an MSP, get the patching responsibility in writing and verify it's actually happening—ACRO's breach was caused entirely by an unpatched CMS and unclear ownership. Founders running any CMS (WordPress, Kentico, Drupal) should check whether patching is explicitly assigned in their vendor contracts and whether someone is actually applying hotfixes, not just assuming the MSP handles it.

Tencent beat Q2 2026 revenue estimates at 204.78 billion yuan ($30.36B), up 11% YoY, driven by domestic gaming revenue jumping 17% (titles like Delta Force and Valorant) and AI-driven advertising. Net profit missed at 56 billion yuan vs 61.82 billion expected, and capex is rising as the company competes in China's AI race; the stock was down 26% YTD.

Why: Tencent's profit miss alongside rising capex signals that AI infrastructure spending is squeezing margins even for cash-rich incumbents — a data point for SEA founders and builders weighing whether AI-driven ad or gaming features justify their own infrastructure spend. The AI-advertising revenue lift also suggests ad-tech integrations with AI are monetizing now, not just in roadmap slides.

An Akira ransomware affiliate breached a victim via a SonicWall SSL VPN account that lacked MFA, then rebooted the machine into Safe Mode to kill security tools—but Safe Mode also broke the encryptor due to memory constraints. Huntress analyst James Northey warns this was a lucky break, not a reliable defense, since attackers could retool the encryptor to work in Safe Mode. Data and credentials were already exfiltrated before the encryption failed.

Why: If you run a SonicWall SSL VPN or any VPN endpoint without MFA, you are the exact target profile described here—credential-spray attacks succeeded in seven minutes against an unprotected account. Enforce MFA on all VPN accounts now, and assume that even if encryption fails, attackers will still steal Active Directory data and file-share credentials before they leave.

Picus Labs' Blue Report 2026 analyzed 338M+ attack simulations across production environments in H1 2026, finding perimeter prevention rose from 62% to 69% while post-compromise interior prevention was only 37%. Reconnaissance was stopped just 10% of the time and credential theft ~22%, while noisy lateral movement techniques like Sharp-ServiceExec and SMBExec were blocked ~90% of the time.

Why: If you build or operate services with an authenticated interior, assume your perimeter will hold but your internal controls will not. The data says quiet post-compromise actions—domain recon, share enumeration, reading credentials from memory and registry—are nearly unopposed once an attacker has a foothold, so prioritize internal segmentation, credential hygiene, and detection of low-noise recon over further perimeter hardening.

Adobe patched three CVSS 10.0 vulnerabilities across ColdFusion and Campaign Classic, including OS command injection (CVE-2026-48362) and eval injection (CVE-2026-48273) in ColdFusion, plus incorrect authorization flaws in Campaign Classic (CVE-2026-71398, CVE-2026-27302). ColdFusion fixes are in versions 2025.0.12 and 2023.0.23; Campaign Classic fixes require ACC v7 7.4.4 build 9400 for on-premise deployments only. Adobe rated these Priority 1 and recommends patching within 72 hours.

Why: If you maintain or inherit ColdFusion or on-premise Campaign Classic instances—common in legacy Malaysian enterprise, GLC, and some government digital service stacks—these are remotely exploitable arbitrary code execution bugs with no current wild exploitation, meaning patching now is cheap insurance before attackers reverse-engineer the fixes. Adobe-hosted Campaign instances are already patched, so only on-premise and hybrid deployments need action.

Malaysians with passports valid for more than 10 years—caused by JIM rolling over remaining months when renewing early—were barred from international flights because airline booking systems reject the extended validity dates. JIM has capped all new passports at exactly 10 years and is offering free replacements for affected holders, plus priority service at immigration offices.

Why: If you hold a Malaysian passport with validity exceeding 10 years, you should apply for a free replacement before your next international trip to avoid being denied boarding. For builders, this is a concrete example of a data validation edge case in airline systems forcing a government policy change—a useful case study in how rigid field constraints in booking systems can create real-world friction with legitimate documents.

Independent bookstores across Europe are reportedly receiving suspicious bulk orders for thousands of books, with sellers suspecting the books are being acquired to be destroyed and used as AI training data. The orders are believed to be part of AI tech companies' broader push to acquire more training data as publicly available web sources become exhausted or legally contested.

Why: Signals that the era of scraping freely available web text for AI training is closing, and companies are turning to physical media acquisition as a data sourcing strategy. Founders building AI products should expect training data costs and legal scrutiny to rise, and should not assume their models can be trained on publicly available text indefinitely.

A researcher going by 'Chaotic Eclipse' has published a proof-of-concept called ShieldBreak that claims to fully bypass Microsoft's patch for CVE-2026-50656 (RoguePlanet), a race condition in the Microsoft Defender Malware Protection Engine (mpengine.dll) that can grant SYSTEM-level privileges. The PoC reportedly has a 100% success rate on Windows 11 25H2 and Windows Server 2025, with Windows 10 also vulnerable but untested. Microsoft says it is investigating the patch bypass claim.

Why: If you run Windows 11 25H2 or Windows Server 2025 in production or dev environments, this PoC means the existing Defender patch for CVE-2026-50656 does not actually protect you — an attacker with local access can still escalate to SYSTEM. Treat Defender's patch as insufficient and add compensating controls (restrict local user privileges, monitor for unexpected child processes from Defender's engine) until Microsoft ships a corrected patch.

Koray Kavukcuoglu, previously DeepMind's CTO and Google's chief AI architect, is replacing cofounder Demis Hassabis as SVP of DeepMind, reporting directly to Sundar Pichai. He inherits oversight of Gemini model development, frontier AI research, and the Gemini app and developer teams, with Google having not released a frontier model since early 2026 while OpenAI and Anthropic have advanced.

Why: If you're building on Gemini APIs or evaluating it against OpenAI/Anthropic for coding or agent workloads, Google's leadership churn and frontier model drought signal continued uncertainty about Gemini's competitive trajectory. Don't lock in long-term architectural bets on Gemini without factoring in the risk that the next model release timeline and capability level remain unclear.

Accel closed an oversubscribed $550M India fund within weeks, just 19 months after its previous $650M India fund, despite still having over 55% of that earlier fund uninvested. The firm plans to begin deploying the new fund in 2027 and sees India's AI opportunity in the application and infrastructure layers rather than competing with foundation model companies like OpenAI.

Why: For founders building AI-powered enterprise or consumer applications in Southeast Asia, Accel's thesis validates betting on the application layer atop existing LLMs rather than building foundation models. However, this fund is India-specific and deployment starts in 2027, so it has no immediate capital availability for Malaysian or broader SEA founders outside India.

A woman was pulled over at gunpoint twice after Flock's automated license plate recognition software incorrectly linked her vehicle to a homicide investigation. The article describes the real-world consequences of a false positive match from an automated surveillance system, with the woman stating 'Y'all failed me' in response to the repeated stops.

Why: For anyone building automated matching or classification systems, this is a concrete case study of how false positives in production can cause serious real-world harm — not just metrics on a dashboard. If you ship systems that trigger actions on probabilistic matches (plate recognition, face matching, fraud flags), you need to design escalation paths and human-in-the-loop checkpoints that prevent a single glitch from becoming armed police encounters.

Cloudflare's 2026 H1 data shows media, production, and publishing was the most DDoS-targeted sector at 14.2% of all attacks, driven by wars in Ukraine and Iran plus the FIFA World Cup. Media saw nearly 4x the attacks of the second-most-targeted sector (gambling), with government entities jumping from 29th to 9th most targeted after the US-Iran war began.

Why: If you run any availability-critical service (news, events, payments, government portals), this data confirms DDoS protection is non-optional during geopolitical events. Malaysian builders serving real-time content or running election/civic platforms should verify their CDN/WAF DDoS mitigation tier now, not during a crisis window when a 2-hour outage is the entire attack goal.

FlightAware is suing prediction market platform Kalshi for allegedly using FlightAware's real-time flight data and branding to host flight cancellation betting markets without authorization. FlightAware claims Kalshi continued displaying its data and name even after being told to stop, and argues these markets could be manipulated to interfere with flights, posing safety risks.

Why: If you build products that surface or aggregate third-party data, this case is a concrete reminder that scraping or republishing another company's data and branding without a licensing agreement can lead to litigation—even if the data is publicly accessible. Builders using flight, weather, financial, or other real-time feeds should verify their data source terms before embedding that data into commercial products or prediction features.

The FBI is investigating how a North Korean national was hired to work remotely for an unnamed U.S. federal government agency, as first reported by Federal News Network. This is a rare confirmed case of a sanctioned North Korean worker penetrating government employment, though thousands are believed to have infiltrated U.S. and European companies using fraudulent identities to funnel wages back to the regime and steal intellectual property.

Why: If you hire remote developers or contractors, this underscores that identity fraud in remote hiring is not hypothetical — even U.S. federal agencies with security clearances have been breached. Founders and hiring managers should tighten identity verification (video interviews, device fingerprinting, payroll address validation) rather than relying on resumes and references alone.

Mozilla revoked the OpenPGP subkey used to sign Firefox and Thunderbird Linux downloads after an unencrypted copy was accidentally committed to a private internal repository. The revocation certificate uses reason code 2 ("key material has been compromised"), which invalidates all past signatures—not just future ones—meaning older tarballs stop verifying once the revocation is imported. No evidence of external access exists, but Mozilla rotated the key ~7 months early anyway; the new subkey (fingerprint 827E 6586 0867 9618 CD34 9F93 678E 455D 7676 7AA3) is valid until August 5, 2028.

Why: If you manually verify Firefox/Thunderbird Linux download signatures or install via Mozilla's RPM packages, you must import the new subkey and the old key's revocation certificate or your verification and updates will break. The choice of reason code 2 over a benign rotation reason is worth noting for anyone designing key-rotation policy: it trades forward compatibility of old signatures for a conservative security posture.

Mozilla revoked a GPG private subkey used to sign Firefox and Thunderbird Linux releases after an unencrypted copy was accidentally committed to a private GitHub repo accessible to a small number of employees. Audit logs showed no evidence of unauthorized access, but Mozilla did not disclose how the key landed in GitHub or how long it was exposed. Users manually verifying GPG signatures or running Firefox via Mozilla's RPM repo on Fedora 42 or earlier, RHEL, Rocky, AlmaLinux, openSUSE, or SUSE must manually remove the old key and import its replacement.

Why: If you verify Firefox/Thunderbird signatures on Linux or manage RPM-based deployments on older distros, you need to swap keys now—older signed releases will fail verification after importing the revocation. For everyone else, this is a reminder that private signing keys in source control—even private repos with authorized personnel—is a real failure mode that happened to a major project, and Mozilla's silence on duration and cause means you can't assume their exposure window was trivial.

Researchers Alejandro Hernando and Borja Martinez demonstrated at DEF CON 34 that Windows 11's Plug and Play auto-install can be chained into full SYSTEM execution on a fully updated machine. The physical path emulates a Sierra Wireless device to install SwiService.exe, abuses its SetDNS primitive, then emulates a Sony FeliCa reader whose co-installer fetches config over plaintext HTTP with a path-traversal flaw to plant a DLL in System32. A remote variant forges synthetic USB traffic over RDP using a phantom Intel RealSense device and a CRYPTBASE.dll search-order hijack, though Microsoft notes RDP USB redirection is not enabled by default.

Why: If your team runs Windows 11 endpoints with RDP USB redirection enabled or allows untrusted USB devices on managed machines, this chain gives an unprivileged user or authenticated RDP user a path to SYSTEM. The practical action is to verify that low-level USB redirection over RDP is disabled (Microsoft says it is off by default) and restrict physical USB device installation on shared or kiosk-style Windows machines.

Trump Media launched Truth API in early August, offering paying customers faster access to market-moving Truth Social posts. Over 10 firms—mostly high-frequency traders—are paying $60,000–$100,000/month for the feed, which the company calls a 'meaningful' new revenue stream amid a $238M quarterly loss.

Why: This is a concrete example of monetizing a social platform's raw data feed at premium B2B prices—relevant if you're building APIs or data products and wondering what enterprise customers will pay for low-latency access to proprietary content. The pricing ($60k–$100k/month) sets a benchmark for niche data feeds aimed at trading firms.

NUS and OpenAI announced a strategic collaboration giving all NUS students, faculty, and staff access to ChatGPT Edu and Codex with enterprise-grade security. A survey of 500+ Singapore university students found 94% use AI several times weekly, 55% daily, and 35% have already built an AI agent for personal or academic use.

Why: For Malaysian founders and educators, this signals that Singapore's graduate talent pool will arrive with deep, institutional ChatGPT and Codex fluency plus hands-on AI agent building experience. Malaysian startups hiring regional talent or competing regionally should expect a widening AI-literacy gap and may need to invest in equivalent upskilling to remain competitive.

Amazon is funding what may become the largest gas-fired power plant in the US, tied to its first off-the-grid data center built to capture AI compute demand, despite its climate pledges. The plant is positioned as behind-the-meter power generation dedicated to data center operations.

Why: If you build on AWS, the energy economics of AI compute are shifting toward dedicated fossil-fuel infrastructure, which signals that cloud capacity for AI workloads will increasingly come from off-grid deals rather than shared grid capacity. This affects long-term cloud pricing, sustainability reporting for SaaS products, and where new AI compute capacity physically lands.

Anthropic reports that an unreleased research version of Claude, when challenged to attempt the Riemann hypothesis, unexpectedly improved a longstanding lower bound for the fraction of Riemann zeta zeros on the critical line from 41.6% to 67.2%. Two Anthropic mathematicians validated the result, and Claude produced a formally verifiable proof. The work draws on recent research by Baluyot, Goldston, Suriajaya, and Turnage-Butterbaugh extending Montgomery's 1973 techniques.

Why: This is a vendor showcasing its own model on a benchmark with no direct builder takeaway — you don't need to change any tooling or workflow because of it. The only useful signal is that frontier models are now producing novel mathematical proofs drawing on and extending specific lines of published research, which suggests AI/ML practitioners working on reasoning-heavy tasks should track whether formal-proof and verification capabilities become available as product features.

Import AI 468 covers IFP's 23 specific policy ideas across 7 categories for managing risks of automated AI R&D (recursive self-improvement), aiming to give governments tools like transparency mandates, AI verification tech investment, and international cooperation options. The newsletter also mentions PostTrainBench+ and a fictional story about AI takeoff, but the policy framework is the substantive content.

Why: For builders shipping AI agents or automated R&D tooling, these policy categories signal where regulation is heading—transparency requirements into automated AI R&D, verification technology standards, and compute allocation rules. Founders working on AI safety tooling or verification systems should note the explicit call for 'AI verification technology' investment as a potential market signal, though none of these are enacted policy yet.

A routine cyber vulnerability assessment found cameras aboard Royal Navy Kraken Unmanned Surface Vessels transmitting heartbeat signals to an IP address in China. The UK MoD confirmed no classified data was compromised, and the cameras were sourced by Kraken from a third-party supplier. The incident underscores that even benign telemetry transmissions from unvetted supply chain components can surface as serious security incidents.

Why: If you ship IoT or edge devices, or build systems that incorporate third-party hardware, this is a concrete reminder to network-monitor your own components for unexpected outbound traffic before a customer or auditor finds it. The failure here wasn't malware—it was an unexamined camera phoning home. Builders integrating hardware from opaque supply chains should demand component-level network behavior documentation and run passive traffic capture during staging, not trust supplier assurances.