AI Weekly Malaysia

Tom's Hardware reports that Amazon and Synopsys signed a multi-year, billion-dollar IP agreement aimed at accelerating AI chip design, with Synopsys adopting Amazon Bedrock to deploy AI agents on AWS compute and storage. Beyond the deal size and the Bedrock adoption, the item as retrieved contains no pricing, timeline, named products, or technical detail — the page text is almost entirely site navigation and subscription prompts. Treat this as a deal announcement, not a technical write-up.

Why: The only concrete claim is that a major EDA/IP vendor will run its AI agents on Amazon Bedrock rather than a self-hosted or multi-cloud stack. If you already build agent workflows on Bedrock, that is a mild validation signal for the runtime; if you are evaluating agent platforms for a design, verification, or CAD-adjacent tool, it hints that AWS-native agent infra is where a large incumbent is placing its bet. Nothing here changes what you should build this week — there is no pricing, no API, no release date, and no benchmark to act on.

Tom's Hardware reports that Micro Center is requiring photo ID and a signed declaration from customers purchasing an RTX 5090. The declaration reportedly has the buyer disclose where the GPU will be installed and pledge that the card will remain in the United States. The article body supplied here is almost entirely site navigation and subscription boilerplate, so no additional specifics — store locations, effective dates, pricing, or how the pledge is enforced — are available.

Why: If you source high-end GPUs through US retail for builds or resale into Malaysia, this is a change in the purchase process itself: photo ID plus a signed document tying the card to a disclosed install location. That paperwork is a paper trail, and it makes US retail sourcing harder to do quietly or at volume — plan on local or authorized-region channels instead. Note the text here gives no pricing, no date, and no enforcement detail, so treat any claim about how strictly this is applied as unverified until the full article is read.

California Governor Gavin Newsom signed Senate Bill 1246, introduced by state Senator Dave Cortese, requiring autonomous vehicle companies such as Tesla, Waymo, and Zoox to provide local, on-the-ground support when their robotaxis interfere with emergency responders. Operators can be penalized if a robotaxi blocks police or firefighters for more than 30 minutes. The law follows a TechCrunch investigation into incidents where Waymo — which runs roughly 4,000 commercial AVs nationally, about 1,200 of them in the Bay Area — relied on first responders to manually move its vehicles, and an NHTSA letter demanding AV developers produce solutions.

Why: This is a US-only law aimed at three AV operators, and nothing in the text ties it to Malaysia or Southeast Asia, so there is no local compliance action for this audience. The one transferable detail is the enforcement shape: a 30-minute blocking threshold plus a mandated local human-response presence. If you ship any autonomous agent that can block a human workflow, that is the accountability pattern to expect — a measurable outage window and a named human on call, not a disclaimer in the terms.

Kevin Mandia — founder of Mandiant, which sold to Google for $5.4B in 2022 — raised $255.5M for a new security startup, Armadin, at a valuation above $2.5B. The Series B was led by Andreessen Horowitz and Accel, with Bain Capital Ventures, Redpoint, 8VC, Ballistic Ventures, Google Ventures, In-Q-Tel, Kleiner Perkins, and Menlo Ventures participating, and it comes just six months after a $190M Series A in March, bringing total funding past $445M. Armadin's pitch is replacing periodic human penetration tests with always-on agentic swarms that chain vulnerabilities together to hack in, so enterprises find and seal holes before attackers or 'rogue' AI agents do.

Why: This is a funding announcement with no product pricing, named customers, or benchmark data in the text, so it is not a buying signal — but it is a directional one: a16z, Accel, GV, and In-Q-Tel just put $445M+ behind agentic offensive security in under a year, which means 'always-on agent swarm pentesting' is now a funded category rather than a demo. If you run periodic pentests for a SaaS product or you're building agent tooling, expect vendors to pitch swarm-based continuous testing against your existing pentest cadence, and expect to have to ask for evidence — detection rates, false-positive rates, blast radius controls — that this announcement does not provide.

This is the first essay in OpenAI's new "Intelligence Age" series, a platform for outside contributors writing about an AGI future; the authors' note states the views are their own, not OpenAI's. The argument: human minds already outrun human execution capacity — Galileo needed a few dozen hands, while the $10B James Webb telescope needed 18 mirror segments at 50-nanometer precision, 300 organizations across 14 countries, and a global economy. The authors cite Nick Bloom's research showing that sustaining Moore's law now takes 18x more researchers than in the early 1970s and that economy-wide effective research effort rose 23-fold since the 1930s, concluding that genius machines may be most valuable doing the monotonous support work rather than the genius work.

Why: The concrete claim to test against your own roadmap is the ratio, not the philosophy: if progress needs 18x more researchers and 23x more research effort to sustain the same rate, the bottleneck is the surrounding grind, not the ideas. That argues for pointing AI agents and tooling at the unglamorous middle of your pipeline — data prep, test scaffolding, migration and review chores — rather than at the tasks you enjoy. The essay is truncated mid-sentence in the supplied text and offers no product, price, or measurement you can act on this week, so treat it as a framing argument for where to spend agent budget, not as news.

California Governor Gavin Newsom vetoed Senate Bill 1130 on September 30-October 1, 2026, which would have made California the first US state to regulate secretly recording people with wearable devices such as smart glasses. In a letter to lawmakers, Newsom said the bill defined wearable recording devices "too broadly or imprecisely" and included protections that already exist in California law. The bill would have exposed violators to fines or prison time and non-compliant wearable makers to fines; Meta sold more than 7 million wearable glasses last year, and Norway is weighing a potential ban on the technology.

Why: If you ship camera/mic hardware or build apps for always-listening glasses, the practical result is that California still has no state-level consent rule for secret recording, so you are not blocked by a new compliance deadline today. The veto reason — the device definition was too broad — tells you what the next draft will try to fix, so an explicit recording indicator or consent prompt remains the cheaper design choice than retrofitting one after a redrafted bill passes. The text contains no Malaysian or Southeast Asian policy, funding, or infrastructure angle, so there is no local regulatory action to track from this item.

The October 2026 'Ask HN: Who is hiring?' thread (238 points, 232 comments, posted 2026-10-01) is Hacker News' monthly job-post roundup, with rules requiring posters to state location, mark REMOTE or ONSITE, and post only if they personally work at the hiring company. Visible listings include Fredrin, an 'AI software factory' that runs many coding agents in parallel from one Kanban board (each ticket getting its own branch, worktree, and agent session), hiring Forward Deployed Engineers in Los Angeles with REMOTE at $150k-$250k and requiring TypeScript, deep Git/worktree knowledge, and hands-on AI coding agent experience; and Estee Lauder Companies hiring a Staff Machine Learning Engineer in Long Island City, NY on a hybrid, full-time basis. The post also lists third-party mirrors and search tools for the thread, including hnwork.app, nthesis.ai/public/hn-who-is-hiring, and dheerajck.github.io/hnwhoishiring.

Why: This is a job feed, not news, so the useful action is filtering: read the REMOTE tags literally, because Fredrin's post says plain REMOTE while other posters write REMOTE (US) or similar when the country is restricted, which is the difference between a role you can apply to and one you cannot. The skill bar in the top listing is also a signal worth noting — it asks for Git worktrees and multi-agent session handling rather than ML research, so if you've been running coding agents on side projects, that experience is now an explicit hiring requirement. Nothing in this text is Malaysia-specific; treat it as a general remote-role pool.

404 Media reports that Magnet Forensics, the company behind the GrayKey iPhone unlocking tool sold to law enforcement, claims in a leaked promotional video to have defeated Apple's iOS 'inactivity reboot' — the feature Apple quietly added around November 2024 that reboots an iPhone after 72 hours without an unlock. The claimed workaround is a new device called GrayKey Preserve plus an 'Evidence Preservation Mode' feature for existing GrayKey units, which reportedly freezes iPhones in a state that keeps them accessible to forensic extraction. The claims come from a vendor marketing video obtained by 404 Media, not independent technical verification, and the article itself sits behind a paid membership wall.

Why: For most builders this changes nothing you can act on: it is a vendor claim in a leaked promo video about a physical-access forensic tool, not a CVE, an API change, or a remote attack. The one decision worth making is whether any part of your threat model rests on 'the phone is locked, therefore the data is out of reach' — if your team issues iPhones to field staff, handles seized-device evidence, or writes privacy copy implying locked devices are safe, that assumption is now explicitly contested by the vendor's own marketing. If you store user secrets only in app-sandbox storage on iOS, this is not a reason to re-architect; the text gives no mechanism, no iOS version, no device list, and no independent test result.

A New York Times story (dated 2026-09-30) headlined 'Meta Uses A.I. Data Centers to Avoid Billions in Federal Taxes' hit the front page of Hacker News, drawing 234 points and 205 comments. The excerpt supplied here contains only the article and comments URLs, so the actual mechanism, figures, and any Meta response are not available to us. Treat the headline as an unverified claim until someone reads the full piece.

Why: The text does not support a specific takeaway for builders — there is no mechanism, number, or named program in the excerpt, only a headline. The one usable signal is the discussion volume: 205 comments on a tax-accounting story suggests builders care about how hyperscaler AI capex is financed, not just what gets shipped. If you are costing GPU or data-center capacity, flag this as something to verify against the full article before citing it in any budget or planning doc.

Legato announced on October 1, 2026 that its Legato Frames AI hearing glasses are on sale, starting at $999, aimed at adults with up to moderate hearing loss. The frames run all processing on-device (no cameras or recording), weigh 34 grams with lenses, get 10-12 hours of battery, and use a dual-speaker system that the company says cuts escaping sound by 99% a few inches from the ear; they come in three styles with prescription lens and Bluetooth streaming support. The launch follows the startup's exit from stealth weeks earlier with $12 million from Neotribe Ventures, Listen, and Village Global; Legato was founded in 2024 by Mehul Trivedi and Steve Romine, who previously worked on Bose Frames and Bose's hearing aids division.

Why: This is a vendor product launch, and the article text contains no Malaysia or Southeast Asia angle, so there is nothing here that changes a local stack, pricing, or policy decision. The one concrete takeaway is a spec benchmark for anyone building edge AI hardware: full audio inference on-device at 34g and 10-12 hours of battery, with a $999 price pitched against traditional hearing aids. If you don't build wearables or audio devices, this is a consumer gadget announcement you can skip this week.

Simon Willison quotes cryptographer Matthew Green reacting to Anthropic's recent cryptography work. Green argues the field is mid-transition from EC and RSA public-key algorithms to post-quantum schemes built on newer hard problems — hence the number of standards under consideration such as HAWK — and that this makes it an unusually good moment for AI to get good at cryptanalysis. In the best case, he says, AI failing to break these problems gives real confidence in them and makes the cryptanalysis literature more robust.

Why: There is no Malaysia or Southeast Asia angle in this text, and no detail about what Anthropic actually did or published — it is a single quoted opinion. The one concrete decision-relevant point for builders is the migration context Green names: if you have a post-quantum migration on your roadmap (EC/RSA to newer schemes), his argument is that AI-assisted cryptanalysis during this window is more likely to validate the new problems than to break them, so the standards churn around candidates like HAWK is expected rather than alarming. Treat the 'Anthropic cryptography work' claim as unverified from this item alone.

Bitget confirmed that the $387.5 million drained from its hot and warm wallets on September 24, 2026 was enabled by a zero-day in unnamed third-party security products, per a SlowMist investigation. Attackers used the flaw to read a database password from an environment variable, run hidden scripts on at least three nodes starting August 31, 2026, obtain high-level internal credentials, and issue withdrawal commands that bypassed existing risk controls. Funds were taken across 11 blockchains and 13 assets, and only about $632,700 was frozen by Circle, Tether, and NEAR Intents.

Why: If you or a Malaysian client keep operating funds on a centralized exchange or rely on crypto rails for payouts, the concrete number here is the recovery rate: roughly $632,700 frozen against $387.5 million taken, under 0.2%. The breach did not come from Bitget's own code — it came from a third-party security product that had database credentials reachable as an environment variable — so the decision that changes is how you vet and segment vendors that sit inside your credential path, and how much you leave in hot wallets versus cold.

MetaMask said on Thursday (Oct 1, 2026) it is responding to an "ongoing security incident" affecting part of its infrastructure, stating it found "no immediate threat to MetaMask wallets" but disclosing no further details. As a precaution it is proactively exiting affected validators in its non-custodial staking operations; Lido said relevant validators have begun exiting and the final ones are expected to be exited (but not fully withdrawn) by the end of October 7, 2026, which will likely mean foregone rewards and possible downtime penalties. MetaMask stressed the staking operation is non-custodial and it does not hold clients' withdrawal keys.

Why: If you hold ETH staked through MetaMask's Lido-based non-custodial staking, the concrete near-term effects are reward loss on exited validators and possible downtime penalties, with exits completing by end of Oct 7, 2026 — and 'exited but not fully withdrawn' means the stake is not instantly liquid. For everyone else, the actionable point is that MetaMask has published no technical detail, so the 'no immediate threat to wallets' statement is currently unverified; treat it as an open incident rather than a resolved one and check back for the vendor's postmortem before deciding anything about self-custody holdings.

Anthropic published a customer announcement that Barclays is expanding its use of Claude across the bank, targeting Claude Code adoption by 50% of its developer population by end of 2026 and a majority of software engineers in 2027. The post also cites Barclays' Colleague Knowledge Assistant, live since 2025 and built on a retrieval-augmented generation architecture over Claude, used by more than 16,000 colleagues supporting over 20 million UK retail customers. No measured productivity, cost, or quality results are given, and the numbers are Barclays' stated targets plus a vendor-published adoption claim.

Why: This is a vendor-published case study, not a measurement, so do not use it as evidence that AI coding tools cut delivery time. What is usable is the target shape: a large regulated bank publicly committing to 50% Claude Code adoption among developers within a year, which is a concrete benchmark to cite if you are arguing for or against an internal rollout, and a signal for founders selling AI tooling into banks or regulated enterprises that procurement conversations now assume governance and RAG-style knowledge assistants, not just model access. Nothing here changes what a Malaysian builder ships this week; there is no pricing, availability, or regional detail.

Google launched Gemini 4 Argon on September 30, 2026, described as its most powerful model yet, with a specific focus on defensive cybersecurity work. It is not generally available: Argon is rolling out only to a select group of Google's cyber partners through its Fairwind Program, and Google claims it can autonomously find, validate, and patch critical software vulnerabilities. Google also says Argon handles coding, debugging, codebase migrations, and long-video or chart analysis, and cites the Vals benchmarking index to claim it beats OpenAI's GPT-6 Astra and Anthropic's Fable and Opus models.

Why: Almost nobody reading this can use Argon today - access is gated to Fairwind cyber partners, and no pricing, API, region availability, or general release date is given. The only number in the piece is a self-reported benchmark lead on the Vals index, which is Google grading itself; treat that as a claim to verify, not a reason to switch models or rewrite your stack. If your product depends on frontier-model capability, the practical takeaway is that the newest defensive-cyber capability is being distributed through a partner program, so security tooling built on it is a partnership question, not an API call. There is no Malaysia- or SEA-specific detail in the text.

Instinct, an AI agent startup, rolled out a new monetization feature called Instinct Selections that pushes product recommendations to users in dining, travel, and shopping, announced by founder Noah Shinn on X. The recommendations mix AI suggestions with lists handpicked by partners Shinn described as "local chefs, designers, architects, travel guides," and Instinct did not disclose who those partners are. The rollout drew immediate pushback, including from Shruti Gandhi, a general partner at an AI-focused fund, who posted that she "didn't need to buy carry-on luggage, sunglasses, or a brim hat" and asked for a personalized shopping list of things she actually needs.

Why: If you ship an agent that monetizes through recommendations, this is a live example of the failure mode: unsolicited product pushes landed overnight with no visible opt-in, and the criticism came from an investor in the same space within a day. Decide now whether recommendations are opt-in, clearly labeled as commercial, or suppressed until the user asks — the Instinct case suggests default-on pushes cost you goodwill faster than they earn revenue. The undisclosed partner list is a second concrete risk: if you claim "human taste" as a differentiator, being unable to say who the humans are undermines the claim.

Airbnb's fall 2026 product update adds an opt-in AI search toggle that takes text or voice prompts and then surfaces dynamic follow-up filters — typing "baby" reveals cribs, playgrounds, and children's books and toys — plus AI-generated property highlights, AI summaries and reviews, and wishlist comparison. The same release expands on-app services (meal delivery, laundry, baby-gear rental, ski and boat rental in limited locations, broader grocery delivery) and adds social features such as connecting with fellow travelers and booking food tastings and craft workshops. CEO Brian Chesky said Airbnb deliberately avoided a chatbot-style interface and described this as its "first foray into AI search."

Why: The usable takeaway is Chesky's stated constraint: "Anyone can vibe-code a search function, but to do something that doesn't kill conversion rate, that's the hard part," alongside his framing that the difficulty is AI search in e-commerce with "$100 billion going through your platform." If you're building AI search or agentic filtering, that argues for evaluating against conversion/revenue rather than answer quality, and for shipping it as a toggle alongside the existing browse flow instead of replacing it with a chat box. This item contains no Malaysian or Southeast Asian angle, so there is nothing here about local policy, funding, infrastructure, or market opportunity.

Tom Wojcik's essay traces one cause — the Strait of Hormuz, which Iran has kept closed since March using drones, missiles, mines and small boats — into fuel, food and winter heating costs, noting tanker traffic through it fell by more than 90% and that the IEA calls it the largest oil supply disruption the market has ever seen. Brent went from near $97 in early September to around $105 mid-month and $108 on 24 September, after Washington rejected Iran's 22 September written road map for a 60-day regional ceasefire and phased reopening of the strait. He also flags the Breakwave Tanker Shipping ETF rising more than 600% in the war's first two months and up over 2,300% for the year by early September, with supertanker day rates going from under $100,000 pre-war to a record of about $860,000 on 10 September.

Why: This is macro context, not a change to any tool you use — nothing in it tells a developer or founder to alter their stack. The only usable numbers are cost inputs: if your budget includes physical shipping, hardware freight or energy-linked pass-through, ~$860,000/day supertanker rates and ~$108 Brent are what reprice first. The piece contains no Malaysia- or Southeast Asia-specific data, so any local impact is something you would have to verify yourself rather than take from this essay.

Bloomberg reported that OpenAI is in talks to raise at least $30B in a pre-IPO round at roughly a $1.4T valuation, a bridge to an eventual public listing. The report says a refocus on coding drove run-rate revenue up 70% since July to $40B in August, after OpenAI raised $122B in March at an $852B valuation. CEO Sam Altman has ruled out an IPO in 2026, saying it is 'unacceptable to be taking like a 10% chance of killing everybody by the end of the decade.'

Why: Nothing here changes what you build this week — there is no product, API, price, or model change, and OpenAI did not comment, so every number is a single-source Bloomberg report. The one figure worth tracking is the $40B August run-rate, because a company growing 70% in a month on coding workloads is the clearest signal yet that AI coding tools are where the money is, which is where Malaysian SaaS and dev-tool builders should expect the most competition and the fastest-dropping prices.

Microsoft says Russia's Star Blizzard ran at least 13 larger phishing campaigns since January against 100+ organizations tied to Ukraine, mostly in the U.S. and U.K., with at least one machine confirmed infected. The lures impersonate think tanks and NGOs such as Chatham House and the Atlantic Council, and the first email carries no attachment: only if the target replies does the group send a password-protected RAR or ZIP with the password shown in an image. Delivery this year uses a method Microsoft calls RedFlick, which abuses Windows scheduled tasks to install a backdoor named CosmicPulse, replacing 2025's ClickFix fake-CAPTCHA approach, and since March the emails have come from compromised WordPress and cPanel site accounts instead of free services like Proton.

Why: The reply-gated, password-in-an-image archive is a concrete gap: nothing malicious arrives in the first message, so attachment sandboxing and link scanners see a clean email. If your team's playbook says 'no attachment, no risk,' it needs a rule about replying to unexpected event or conference invitations. The WordPress/cPanel detail also matters locally — if you or a client run mail on shared cPanel hosting, a compromised mailbox there can be repurposed to send these lures, so check outbound mail logs and scheduled tasks, not just inbound filters.

Tcl/Tk 9.1.0 was released on Sep 29, 2026 as the development line continuing on top of 9.0. Tcl gains a unicode normalization command, a timer command with a monotonic microsecond clock, lfilter, interp set, new subst (-backslashes/-commands/-variables) and switch (-integer) options, C99 math routines exposed as expr functions, and extended 64-bit size support; Tk adds accessibility screen-reader support, initial bidirectional/RTL text, a ttk::toggleswitch widget, tk attribtable, and rotated label text. The notable break: applications must now call an initialization routine, Tcl_FindExecutable or TclZipfs_AppHook, and macOS case-insensitive filesystem paths plus reworked Windows auto_execok/exec search change how scripts and binaries are located.

Why: If you maintain Tcl/Tk tooling — internal GUI utilities, test harnesses, launcher scripts — a drop-in upgrade to 9.1.0 can fail at startup until you add the now-mandatory Tcl_FindExecutable or TclZipfs_AppHook call, and the reworked macOS path case handling and Windows auto_execok/exec search can silently change which binary or script gets picked. If Tcl/Tk is not in your stack, nothing here changes what you ship this week; the 293-point, 138-comment thread is mostly long-tail-language discussion rather than a decision point. No Malaysian or Southeast Asian angle is stated in the release notes.

On an interview with investor Patrick O'Shaughnessy, Instinct founder Noah Shinn said more than 50% of transactions on the invite-only agent platform are travel-related, and that the platform is approaching a billion dollars in annual transactions while growing "10% day-by-day" with transaction volume rising at a similar rate. Shinn did not specify how the transaction rate is calculated. He also described agents checking restaurant sites every five seconds for open slots and said he wants to "reinvent reservations" to give users preferential treatment, comments that drew criticism.

Why: Treat the numbers as self-reported with no stated methodology: a 10% day-over-day growth rate and ~$1B annual transaction figure would be extraordinary at that compounding rate, so don't use them for capacity planning, market sizing, or a pitch deck without your own verification. The one reusable technical detail is the pattern of an agent polling a third-party restaurant site every five seconds for availability — if you build anything similar, expect rate limits, bot blocking, and server-cost questions from the sites you scrape, and design caching or webhook/API fallbacks rather than tight polling loops.

A Tom's Hardware news-analysis by Anton Shilov (published 29 September 2026) maps where AI already sits in chipmaking: optimizing floorplans, placement and routing, and verification, plus generative AI assisting engineers with RTL code, while emerging agentic systems drive EDA tools through a loop — run analysis, identify problems, modify the design, repeat. It cites Architect Labs claiming in late August to have designed a chip 'almost entirely developed by AI,' described as an industry-first, while noting human engineers still define architectures and make the fundamental design decisions. The excerpt mentions OpenAI's Jalapeño in the headline but never explains what it is.

Why: For this audience the piece is background, not a decision trigger: no pricing, benchmarks, tool names beyond EDA categories, or verifiable evidence behind Architect Labs' 'almost entirely AI-designed' chip claim, so treat that as an unverified vendor assertion rather than a capability milestone. The one transferable idea is the loop shape — an agent that invokes a complex toolchain, reads results, diagnoses failures, and re-runs — which is the same reliability problem you hit when chaining agents over compilers, test suites, or database migrations. If you want something actionable, the article doesn't provide it.

Boston-based Atomic raised a $12.5M Series A led by Klass Capital and Madrona Venture Group, bringing total funding to just over $15M. Atomic simulates supply-chain scenarios and then recommends or automatically picks inventory levels and locations, and its ARR has quintupled since the start of 2026, with named customers DoorDash and HelloFresh. The company was incubated at DVx Ventures, has added longtime Tesla planning director Jeff Goodrich as CTO and third co-founder, and traces its system back to an early version built during Tesla's 2018 Model 3 production ramp.

Why: This is a funding announcement, not a product you can adopt: no pricing, no self-serve tier, no technical benchmarks, and the customers named are US enterprise brands. Treat it as a category signal that 'AI picks the inventory decision, not just forecasts it' is attracting capital, and note CEO Michael Rossiter's own framing is simulation plus path-finding over an infinite decision space — not a claim of measured accuracy. If you build logistics or ops tooling for Southeast Asian merchants, the useful takeaway is that the funded wedge is auto-execution on top of existing planning data, which is a harder trust problem than forecasting.

Singapore's OMIP pilot, running 2025–2026, funds up to 70% of salary (capped at S$5,000/month) plus a S$3,000/month living allowance for up to nine months abroad, a maximum of S$72,000 per worker. The scheme targets 250 workers at Singapore-registered businesses; over 180 have benefited and fewer than 70 places remain, according to figures cited in Parliament. Companies must apply, SMEs make up 75% of participating companies, and since July 2026 the two-year experience minimum was lifted, so fresh graduates can be eligible if the role is new to them.

Why: If you run a Singapore-registered company with an overseas market plan, this is a concrete subsidy that can cover S$8,000/month for nine months, but the company must apply before the pilot ends and fewer than 70 places remain. If your company is not Singapore-registered, this scheme does not apply as described, so there is no direct action for Malaysian-registered founders.