AI Weekly Malaysia

fx is a new, experimental open-source coding agent harness and CLI written in Zig, featuring a tiny 6.39MiB binary size and 10µs cold start time. It is designed for minimalism, embeddability, and model-agnostic use (local or cloud), offering a shell-like UI rather than a heavy terminal IDE.

Why: Builders looking to embed coding agents into larger systems or run them in resource-constrained sandboxes can evaluate fx's minimal memory footprint and WebAssembly support. Its model-agnostic design means you can swap underlying LLMs without changing the harness.

Researchers from UMass Amherst demonstrated at USENIX Security 2026 that expired Visa contactless credit cards can be revived to make unauthorized payments via a man-in-the-middle attack using mobile phones as NFC proxies. The vulnerability stems from Visa's EMV kernel not cryptographically binding the expiration date, unlike American Express, Discover, and Mastercard kernels, and from wallet Card Transaction Qualifiers steering transactions toward online authorization rather than immediate rejection.

Why: If you build or integrate payment systems in Southeast Asia—where contactless card and wallet adoption is near-universal—this is a concrete protocol-level flaw in Visa's contactless kernel, not a configuration mistake. Fintech builders should verify whether their issuer-side authorization logic independently checks card expiration rather than trusting the POS terminal's evaluation, since the attack exploits exactly that delegation gap.

Scicom rebuilt Malaysia's Digital Free Trade Zone (DFTZ 2.0) platform without access to the previous source code, full technical documentation, or complete historical production data, replicating business outcomes rather than legacy components. The new platform is modular, API-driven, and configurable, hosted on MDEC's cloud with MDEC owning the programme and data while Customs retains regulatory authority. Scicom funds development, infrastructure, and ongoing enhancements, recovering investment through a revenue-sharing model rather than a fixed-price contract.

Why: Malaysian founders and developers building cross-border e-commerce or logistics integrations should note that DFTZ 2.0 is now API-driven and modular, meaning integration paths for Customs declarations, company onboarding, and transaction reporting may be more accessible than the legacy system. If you ship or plan to ship through Malaysia's digital trade zone, check the new API surface and revenue-sharing structure before committing to workflows built on assumptions from the old platform.

Apple announced a tiered EU App Store commission structure: 26% for purchases through Apple's App Store and payment system, 20% for apps using their own payment processing, 15% for apps linking out to a website, and 5% for apps distributed via third-party stores or the web. Apple says this resolves DMA-related regulatory disputes, though the 26% rate is notably higher than the previously standard 30% only when considering the new lower-cost alternatives.

Why: If you ship an iOS app to EU users, your distribution and payment routing choice now has a direct 21-percentage-point cost spread between Apple's full stack (26%) and third-party/web distribution (5%). Malaysian founders targeting EU markets should model whether the engineering effort of supporting alternative payment flows and third-party stores is worth the commission savings, especially for high-margin digital goods.

Nvidia is leveraging its capital position as a competitive moat, announcing a $500 billion financing pact with Wall Street firms for its GPUs and up to $105 billion in support for OpenAI's Ohio data center. Jensen Huang noted that frontier labs are growing faster than their balance sheets and credit profiles can support, positioning Nvidia's financing capacity as a strategic differentiator as AMD and Google chip away at its technology lead.

Why: For SaaS founders and AI builders, Nvidia's financing strategy signals that GPU access is increasingly tied to vendor financing deals, not just procurement. If your cloud or model provider is dependent on Nvidia-backed financing, expect pricing, availability, and roadmap commitments to be influenced by Nvidia's capital terms rather than pure market competition.

Perplexity partnered with Indian telecom Airtel in July 2025 to give 360 million customers a free 12-month Perplexity Pro subscription (normally ~$200/year). The offer drove 5.9 million app downloads in its launch month (up 625% month-over-month) and 56 million downloads over seven months, with monthly active users peaking at 22 million in October. Now the earliest free subscriptions are expiring, testing whether bundled AI giveaways convert to paying users.

Why: For Malaysian SaaS founders and AI product builders, this is a concrete data point on telecom-bundled distribution in emerging markets: free giveaways via telco partnerships can drive massive user acquisition (625% download spike), but the real test is conversion after the free period ends. If you're considering partnerships with Malaysian telcos (Maxis, CelcomDigi, Unifi) for AI product distribution, the Airtel-Perplexity model shows the top-of-funnel scale possible but flags the unresolved question of whether free-tier telecom users convert to paid SaaS subscribers.

Research by agent security platform Reco identifies a single server (158.220.87.79 on a Contabo VPS in Germany) that has been scraping Salesforce Experience Cloud and ServiceNow Service Portal sites since at least March 2025, targeting telecoms, banks, enterprise software vendors, and public sector portals. The attacker uses a compiled Go program (fingerprinted via net/http default user agent) that goes beyond known Aura guest-access abuse by also hitting Salesforce's Lightning Web Runtime UI-API across versions v56.0–v66.0 and an undocumented ServiceNow endpoint POST /api/now/sp/search. One target logged over 560,000 events from the same IP.

Why: If your organization runs a Salesforce Experience Cloud site or ServiceNow Service Portal with a public-facing guest user, audit that guest profile's object and field permissions now—Reco's findings show the guest identity is the common exploit vector across all techniques, and it can only be restricted, not deleted. Malaysian banks, telecoms, and government portals are in the target profile, so local teams using these platforms should verify guest access is scoped to only what the public site actually needs.

A tracking device hidden inside a rare book led to the discovery that an Amazon facility in Las Vegas is dedicated to destroying books to produce training data for AI models. The title states this is 'all' the warehouse does.

Why: If you build or train AI systems, this reveals a concrete, controversial data-sourcing pipeline—physical book destruction—behind training corpora that may flow into models you use or build on. Founders and ML practitioners should factor reputational and legal risk into decisions about sourcing training data from third-party vendors.

A software mod unlocks the 64GB of VRAM on Nvidia's CMP 170HX, a $250 crypto-mining GPU that originally had its display outputs and general compute capabilities locked down. The mod repurposes these surplus mining cards for AI workloads, where VRAM capacity is the primary bottleneck for running large models locally.

Why: If you're priced out of A100s or H100s for local LLM inference, a $250 card with 64GB VRAM is a genuine alternative worth testing — but the source text is mostly site boilerplate, so reliability, driver support, and actual inference performance remain unverified from this article alone. Builders should treat this as a lead to investigate, not a validated deployment path.

MIT CSAIL researchers Zheng Dai and David K Gifford found that attributing diffusion model outputs to specific training data becomes impossible as models are trained on sufficiently large corpora. Their paper, 'Outputs of Generative Diffusion Models are Often Unattributable,' to be published in Nature Communications, complicates ongoing copyright litigation like Andersen et al. v. Stability AI Ltd (2023), where plaintiffs are trying to force Midjourney to disclose training datasets.

Why: If you ship products using diffusion models (image, video, audio generation), this research suggests you cannot reliably trace outputs back to specific training inputs at scale — which weakens both your ability to audit for IP infringement and plaintiffs' ability to prove it. Founders using Stable Diffusion or similar models commercially should factor this attribution gap into their copyright risk strategy rather than assuming they can retroactively identify problematic outputs.

Tencent Cloud announced its first Malaysia cloud region, comprising up to three availability zones in Johor, joining its global network of 66 AZs across 23 regions. The company also pledged to collaborate with Universiti Teknologi Malaysia to train over 1,000 digital and AI talents, and showcased enterprise AI products including WorkBuddy (agentic workspace), Agent Development Platform (custom multi-agent builder), and TokenHub (multi-LLM Model-as-a-Service via single API). Tencent's Hy3 large model is available free through WorkBuddy until 31 Aug 2026 Pacific Time.

Why: A Johor-based cloud region gives Malaysian builders a new option for lower-latency deployment and data residency within Malaysia, which matters for compliance-sensitive workloads. TokenHub's single-API multi-LLM access and the Agent Development Platform are worth evaluating as alternatives to existing agent-building and LLM gateway tooling. Hy3 being free through WorkBuddy until 31 Aug 2026 is a time-bound opportunity to test Tencent's flagship model at no cost before committing.

Asana used OpenAI Codex to remove Enzyme, an unmaintained testing framework blocking frontend modernization, in 1.5 weeks of engineering effort across 2 calendar weeks for ~$12K in model/infra costs—versus a prior estimate of 5 years and ~$6M in staffing. Up to 4 coding agents ran in parallel on separate codebase copies, launched from a five-sentence prompt, with an engineer reviewing progress twice daily. Asana's CTO Amritansh Raghav cautioned that not every long project will compress this dramatically.

Why: The concrete workflow details—simple five-sentence prompts outperforming elaborate setups, parallel agents on separate codebase copies, human review twice a day—are a usable blueprint for tackling large legacy migrations with AI agents. The $12K vs $6M cost gap is vendor marketing, but the pattern of decomposing a years-long refactor into agent-parallelizable chunks is worth testing on your own technical-debt backlog.

Google paid $10 million at Spirit Airlines' liquidation auction for a massive trove of deidentified operational and customer data: 100 million emails, 500 million Teams items, 30 million recorded calls, 600,000 ServiceNow tickets, 763,000 flight records, and more. The underbidder was Mercor, an AI training data provider, signaling demand from AI companies for domain-specific datasets.

Why: This signals that large AI labs are acquiring entire enterprise datasets wholesale to train domain-specific models, not just scraping the web. Founders and builders should expect that proprietary operational data has real market value and that deidentified enterprise data is becoming a tradable asset class for AI training. The article also notes growing expert belief that smaller, domain-specific models outperform general LLMs in some applications.

Anthropic engineer Sachin Malhotra describes how Claude Tag acts as the first responder for CI/CD failures at Anthropic, publishing initial situation reports within 15 minutes of incidents. The agent holds memory across a dedicated on-call Slack channel, uses a service account with tool access to investigate, and accepts natural-language scheduling prompts like 'run CI handoff every Monday at 9:00am EST.' In one example, Claude identified that 44 missing tests were caused by a feature flag turned on that morning and recommended reverting it.

Why: If you maintain CI/CD pipelines and want to reduce on-call pain, this article outlines a concrete agent architecture—Slack channel as memory surface, service account with scoped tool access, natural-language scheduling—you can replicate with Claude or adapt to other LLM agents. The 15-minute first-analysis benchmark is a useful target to measure your own automation against.

Relay, an AI workflow automation startup launched in 2021 as a 'new Zapier,' is shutting down. Paying customers lose access September 14 (free users already lost it August 15). Founder and CEO Jacob Bank, who previously spent 6+ years at Google after his scheduling startup Timeful was acquired, is rejoining Google as VP of Product for Chrome, leading product and developer relations, with plans to integrate AI agents into the browser.

Why: If you were a Relay customer, you need to migrate your automation workflows before September 14. For everyone else, Bank's move signals Google is serious about embedding AI agents directly into Chrome — a browser with billions of users — which could reshape how developers build agent-driven experiences and how end users interact with web-based automation. The shutdown is also a reminder that VC-backed AI automation startups can disappear fast; don't build critical business processes on a single young platform without an exit plan.

Nvidia will provide credit and compute for a new OpenAI data center in Ohio, backing $105 billion in financing. SB Energy will build and manage the facility at the PORTS-Pike Technology Campus in Pike City, Ohio, under a 20-year lease to OpenAI, with initial capacity of 4.25 GW and an option for 3.75 GW more, coming online in phases starting 2028.

Why: Nvidia is moving from chip vendor to compute infrastructure financier, tying GPU supply directly to data center capacity for its largest customers. If you build on OpenAI APIs or depend on GPU availability, this signals that long-horizon compute capacity is being locked up by frontier labs through multi-decade deals—plan for a market where independent access to frontier-scale compute may get harder and more expensive, not cheaper.

404 Media used an AirTag hidden in a ~1,000-book order placed by an anonymous, price-insensitive buyer on Biblio to trace where bulk rare books are going. The shipment ended at Amazon's LAS8 facility in northeast Las Vegas, specifically the VGT3 section, where worker forum discussions confirm large volumes of books are destructively scanned—strongly suggesting Amazon is scanning books for AI training data.

Why: This is concrete evidence of the physical supply chain behind AI training data collection: companies are buying books in bulk and destroying them to scan content. If you ship AI products, this is relevant to copyright and licensing risk discussions—your models may be trained on data sourced through channels that could attract future litigation or regulatory action, especially as jurisdictions tighten training-data provenance rules.

Nvidia is investing $1.5B in SB Energy and extending up to $105B in credit to build OpenAI's Ports-Pike data center near Cincinnati, Ohio, securing itself as sole compute infrastructure supplier for a facility scaling from 4.25 to 8 gigawatts. The site includes a planned $33B, 9.2 GW natural gas power plant on former US uranium-enrichment land, with natural gas plant construction costs having risen 66% in two years.

Why: This signals that frontier AI compute is being vertically locked into Nvidia-supplied US mega-sites at unprecedented scale and cost, meaning cloud GPU pricing and availability outside the US will likely remain tight for years. Builders relying on GPU compute should factor continued US-centric infrastructure concentration into their architecture and cost assumptions, and consider whether multi-cloud or regional providers (including SEA options) offer better long-term economics than chasing US-based capacity.

America's largest electricity grid operator is proposing that new data centers consuming 50MW or more must bring their own on-site power generation or face being first in line for blackouts during supply shortages. The rule targets the massive power demands of AI-driven data center expansion and shifts the burden of grid reliability onto the largest new consumers.

Why: If you're planning AI infrastructure or choosing cloud regions, this signals that grid-constrained markets may increasingly deprioritize new data center loads — meaning higher costs, forced on-site generation requirements, or reliability risks for capacity you depend on. Malaysia's Johor data center boom could face similar regulatory pressure as grid capacity tightens, so builders should factor power availability into long-term cloud and colocation decisions now.

A threat actor called 'TheHatman' is selling millions of employee records allegedly exfiltrated from Microsoft Azure environments of nine major companies, including McDonald's (1.7M records), TCS (800K), Vodafone (425K), and HCL (250K). Hudson Rock assessed the data as 'highly likely authentic,' noting it contains phone numbers, physical addresses, job titles, reporting structures, group memberships, and—critically—identities of Global Administrator accounts, making it a phishing and privilege-escalation shortlist.

Why: If you run Azure AD/Entra ID, this illustrates what a directory export actually leaks beyond email: org charts, service account details, and who holds Global Admin. Audit your Entra ID for infostealer-compromised credentials, enforce phishing-resistant MFA on all admin accounts, and review third-party app permissions—Hudson Rock specifically flagged overly permissive third-party apps as a likely vector. The data exposure is severe even without passwords, because knowing your Global Admins by name is enough for targeted attacks.

A Japanese repair shop offers GDDR6 VRAM upgrades at $25 per GB, modding an RTX 2080 Ti from 11GB to 22GB for $282 total. This doubles the card's VRAM at a fraction of the cost of buying a higher-VRAM GPU, positioned as a budget option for AI workloads during a GPU memory shortage.

Why: If you're running local LLM inference and hitting VRAM walls, a $282 VRAM mod on an older card like the RTX 2080 Ti could let you load larger models locally without spending $1,500+ on a new high-VRAM GPU. The $25/GB price point is worth benchmarking against the cost of cloud GPU rentals for your actual workload.

Black Hat and DEF CON 2026 in Las Vegas were dominated by AI agent security concerns, with discussions centering on rogue agents escaping sandboxes and threats to critical infrastructure. Government and former government leaders expressed worry, and even conversations about US water infrastructure attacks looped back to AI.

Why: If you're shipping AI agents, the security community is now treating sandbox escapes as a real and expected failure mode rather than a hypothetical. This should push you to treat agent containment, permission scoping, and output validation as first-class engineering problems before deploying agents that can take actions on infrastructure or customer systems.

Linux 7.2 is released with Torvalds acknowledging that AI coding tools have increased contribution volume to the point where releases are messier but delaying is no longer viable — 'If I delayed releases for that reason we'd probably never have a release at all.' The kernel adds Cache Aware Scheduling for manycore chips like AMD EPYC 5 and Intel Xeon 6, Apple M3 support, and next-gen AMD/Intel/Nvidia chip readiness, while dropping AppleTalk and old ISA/PCMCIA ARCNet adapter support.

Why: Torvalds explicitly attributing larger, messier release cycles to AI-assisted contributions is a concrete signal that AI coding tools are now reshaping even the most rigorous open-source development process — if you maintain or contribute to shared codebases, expect review burden and revert frequency to rise. On the infrastructure side, Cache Aware Scheduling on EPYC 5 and Xeon 6 means workloads on those chips should see better cache utilization without application changes, worth benchmarking if you run dense multi-core workloads.

Singapore's GDP grew 5.9% YoY in Q2 2026, driven largely by AI-related demand boosting manufacturing (electronics output +33.8%, precision engineering +19.3%) and finance (+6.2%), while retail (+1%), accommodation (+2.2%), and F&B (-1.5%) lagged. Productivity gains are concentrated in outward-oriented industries (+6.9%) while domestically-oriented sectors saw productivity fall 0.1%, creating a widening gap between AI-adopting and non-adopting sectors.

Why: For Malaysian founders and builders, this is a leading indicator of how AI-driven growth concentrates in semiconductor, cloud, and finance supply chains while leaving consumer-facing businesses behind. Companies positioned in AI infrastructure, wholesale trade, or fintech should expect tailwinds; those in retail, F&B, or professional services face stagnation unless they find AI-leveraged productivity plays. MTI's finding that initial AI employment gains accrue to higher-earning and skilled foreign workers suggests hiring strategies should prioritize AI-adjacent roles now.

Chinese AI company Zhipu launched GLM-5.3, claiming it outperforms Fable 5 and GPT-5.6 Sol on the CyberGym benchmark for vulnerability discovery. The model reportedly found 2,436 vulnerabilities across 269 real-world projects, including 1,097 medium-to-high severity issues spanning kernels, browser engines, and network protocols—some dating back roughly 40 years. However, GLM-5.3 performed worse than Western models on other security and coding benchmarks.

Why: If you ship code, AI-assisted vulnerability discovery is becoming a commodity capability across multiple model providers, not just US labs. The 2,436-bug finding across 269 projects suggests you should evaluate AI bug-finding tools against your own codebase now rather than waiting for a single dominant provider. The fact that GLM-5.3 underperforms on general coding benchmarks but excels at exploitation-chain reasoning means bug-finding may be a distinct capability axis worth benchmarking separately when choosing models.