AI Weekly Malaysia

Lovable raised $400M in a Series C at a $13.3B valuation, up from $6.6B in December, after hitting $500M annualized run rate revenue in June. The platform now hosts 60 million projects with 900 million monthly visitors, signed a multiyear Google Cloud deal with fivefold increased usage, and offers its own in-house trained AI model alongside frontier model options.

Why: The $500M ARR and 900M monthly visitors signal that vibe-coding tools have reached mainstream scale, not just hype—if you build developer-facing tooling or AI agents, expect users to compare your UX against Lovable's. The in-house model detail is worth noting: it suggests margin pressure from frontier API costs is pushing even well-funded startups to train their own models, which affects build-vs-buy decisions for anyone shipping AI-powered coding tools.

CoreWeave CEO Mike Intrator says the company has signed A100 GPU contracts extending into 2029, demonstrating that Nvidia's 2020-era GPUs remain profitable nine years post-deployment. Power constraints and legacy infrastructure costs make older GPUs economically viable even as newer chips arrive.

Why: If you're budgeting GPU compute for AI workloads, don't assume older GPUs like the A100 will become cheap or obsolete soon — CoreWeave is locking customers into multi-year A100 contracts through 2029, which signals sustained pricing power for legacy hardware. This affects cost planning for anyone renting cloud GPU capacity or deciding whether to wait for next-gen capacity versus contracting now.

Group-IB detailed a fraud campaign called WindRelay that combines a phone-based social engineering attack with two Android malware strains—SpyNote (a RAT leaked in 2016) and WindRelay (NFC relay malware discovered August 2025)—to clone contactless card transactions in as little as 13 minutes. The attacker poses as bank helpdesk, gets the victim to install SpyNote, which silently deploys WindRelay, then tricks the victim into tapping their card on their NFC phone and entering a PIN. WindRelay captures the live EMV APDU exchange and relays it to an attacker-controlled POS terminal or ATM, completing a genuine card-terminal handshake that authorizes fraudulent payments.

Why: If you build or operate payment, fintech, or banking apps in Malaysia—where contactless card and e-wallet usage is near-universal—this attack shows that contactless EMV is not a trust boundary you can rely on when the cardholder's own device is compromised. Fintech teams should evaluate whether their fraud detection can flag relay-style transactions characterized by unusual POS-to-cardholder geolocation or timing gaps, and whether customer-facing flows that instruct users to tap cards on phones create teachable moments for social engineering awareness.

Meta and Nvidia both released open-weight AI models this week, available for free download, as part of a broader US effort to compete with leading Chinese labs in the open-source AI space. More than 20 US tech companies recently urged policymakers to avoid 'premature restrictions' on open-weight models, including those from China.

Why: If you build with open-weight models, you now have new free options from Meta and Nvidia to evaluate alongside existing Chinese open-weight offerings. The policy lobbying signal also matters: if restrictions on open-weight models are delayed, you retain broader access to frontier open models for local deployment and fine-tuning without vendor lock-in.

Known Agents' Agentic Web Index reports that 35% of web traffic is bots, with 29% of that bot traffic being AI-related (up 11% over 90 days). Someone is conducting mass vulnerability scans while spoofing their user-agent as AI bots like ClaudeBot, making malicious scanning traffic harder to distinguish from legitimate AI crawler traffic.

Why: If you block or rate-limit by user-agent string, spoofed scanners can masquerade as known AI bots like ClaudeBot to evade detection. Don't rely on user-agent alone for access control or bot management—consider behavioral fingerprinting, IP reputation, and challenge mechanisms instead. The 98.5% robots.txt compliance rate also means robots.txt is not a security boundary.

Nathan Lambert reflects on writing an AI textbook and argues that LLMs remain stagnant at long-form non-fiction writing, increasing entropy rather than compressing knowledge into insight. He contends that if models can't organize and present established science, they're not ready to autonomously solve open-ended scientific problems, and that progress will look more like low-hanging fruit and cross-field connections than revolutionary breakthroughs.

Why: If you're building AI agents for research, technical writing, or autonomous knowledge work, this argues against assuming models will soon self-organize complex information into coherent long-form output. Plan for human-in-the-loop structuring and editing rather than end-to-end autonomous generation for anything requiring sustained argument or knowledge compression.

The FCC is drafting a measure under the Secure Networks Act to block imports of new Chinese optical transceiver models, with a target to publish the rule before end of 2026. The move has sent shares of Chinese photonics makers (Zhongji Innolight, Eoptolink, TFC Optical) tumbling while boosting Western rivals Coherent and Lumentum, as companies like Nvidia and Marvell pour billions into silicon photonics acquisitions to solve AI's copper interconnect bottleneck.

Why: If you build or budget for AI infrastructure, expect upward pressure on optical transceiver costs and potential supply constraints as US restrictions reshape the photonics market — Malaysia-based data center and hardware players could see both risk (component sourcing) and opportunity (manufacturing rerouting). Track whether indium phosphide shortages and transceiver import bans hit before your next hardware procurement cycle.

An opinion piece arguing that hyperscalers are using AI-driven demand to lock up the enterprise hardware supply chain, leaving businesses little choice but to rent compute back from them. Nutanix CEO Rajiv Ramaswami noted the fastest way to get a new server is now to rent from a hyperscaler; Micron, SK Hynix, and Seagate have long-term supply deals favoring their largest customers; AMD has sweetheart deals with OpenAI and Meta. AWS CEO Andy Jassy says AWS recoups server spend in under three years on assets with 5-6 year useful lives, with datacenters designed to last 30 years.

Why: If hyperscalers continue cornering hardware supply, bootstrapping or cost-sensitive Malaysian startups that planned to own on-prem or colo gear will face longer delivery times and higher prices, making cloud rental the de facto path. Founders should model infrastructure costs assuming hyperscaler pricing power persists rather than betting on cheaper self-hosted hardware, and consider locking in longer-term cloud commitments if AI compute is core to their product.

Written shortly after OpenAI announced it had solved ten major open problems in mathematics and theoretical computer science—including the first construction of a non-sofic group and a superexponential growth proof for multicolour Ramsey numbers—this post observes that LLMs' most famous mathematical successes have overwhelmingly involved finding counterexamples rather than constructing proofs. The author explores whether this pattern reflects a genuine structural strength of LLMs and what it might reveal about where they still fall short of human mathematicians.

Why: If you build or rely on LLM-based reasoning tools, this suggests a concrete asymmetry: LLMs may be more reliable at disproof-by-counterexample than at constructing novel proofs, which should shape how you scope tasks for agentic math or formal-verification workflows. The author also notes that despite headline results, LLMs are not uniformly better than humans at all mathematics—if they were, their speed advantage would produce a flood of results that has not materialized.

Attackers are actively exploiting CVE-2026-59310 (CVSS 9.8), a directory-traversal flaw in Broadcom VMware vCenter, with 361 victim IPs across 47 countries as of August 2026. Patches were released by Broadcom in late July 2026, and exploitation began within days of disclosure, using reverse_ssh via cron jobs for persistent remote access. QUIRSO attributes the campaign to a suspected APT actor.

Why: If your team runs VMware vCenter and has not applied Broadcom's late-July 2026 patch, patch now — the exploit chain is trivial enough that 361 hosts were compromised within days of disclosure. The reverse_ssh persistence technique bypasses inbound firewall rules, so compromised hosts may not show obvious inbound connection alerts.

Mark Pesce gave an AI agent SSH access to a 15-year-old device running ancient Arch Linux with a browser too old for modern encryption. Over three hours the agent failed to compile modern cURL, then found a fast math library that solved the CPU's lack of floating-point support, and got the device chatting via Telegram. He then used agents to revive a 12-year-old iMac Pro on Ubuntu, a 10-year-old VR PC, and an underpowered Surface Go, arguing that agents have made the cost of testing ideas nearly zero.

Why: If you have old hardware or niche environments you've abandoned because the config grind isn't worth your time, an agent with SSH access can plausibly handle the research-and-compile loop for you. The practical lesson is to let agents do the tedious cross-referencing of Reddit posts, GitHub repos, and firmware notes, then step in only when they hit a wall — as Pesce did by asking the agent whether someone else had already solved the math-library problem.

China blocked Meta's December 2025 acquisition of Manus AI, the Chinese agentic AI startup that claimed a $100M run rate and had moved its HQ to Singapore. Manus will resume independent operations and will delete all user data generated since December 29, 2025 on August 24, 2026 — users must download before then to restore it afterward.

Why: If you or your team used Manus AI for agent workflows since late December 2025, you have until August 24 to export your data or lose it permanently. The blocked acquisition also signals that China will actively prevent foreign control of notable AI agent companies, which affects any builder considering partnerships, investments, or integrations with Chinese AI startups — expect regulatory friction, not just technical risk.

llama.cpp launched an official website at llama.app with a one-line install script, package manager support (Brew, Winget), and a local coding agent workflow via the pi-llama plugin that auto-discovers your served model with no API keys or config. The site lists supported hardware ranging from Apple Silicon to H100 clusters and highlights models like Qwen 3.6, Gemma 4, GPT-OSS, and Gemma 3.

Why: If you want a fully local coding agent with zero API costs and no data leaving your machine, the `llama serve` + `pi install git:github.com/huggingface/pi-llama` + `pi` flow is now a three-command path worth trying on your existing hardware before paying for an API-based agent.

Reserve Bank of India governor Sanjay Malhotra urged banks to use AI to approve loans for underbanked groups like gig workers and first-time borrowers by analyzing alternative data such as GST filings, utility payments, and digital footprints. He also advocated for AI voice interfaces in local languages to improve financial inclusion and early warning systems for default risk.

Why: Fintech and SaaS founders in Malaysia can anticipate similar regulatory pushes for AI-driven financial inclusion using alternative data, especially for vernacular language interfaces and gig economy underwriting.

Researchers found that OpenAI, Anthropic, and Google encrypted chain-of-thought reasoning blocks returned via their APIs could be replayed into weaker sibling models in the same family (which shared the same encryption key) and jailbroken into outputting the raw plaintext reasoning. Claude Haiku 4.5 was the easiest to attack using a prompt that asked it to transcribe reasoning verbatim inside a thinking-copy tag. All providers acknowledged the report and patched the issue.

Why: If you build on proprietary reasoning APIs, this reveals that encrypted reasoning blocks are portable across sessions and models within a family, and that weaker models can be coerced to decrypt them. The attack is patched, but the paper's appendix exposes what raw reasoning traces actually look like inside frontier models—useful for anyone evaluating whether to rely on reasoning_effort parameters or build agent pipelines around hidden CoT.

Signal introduced Automatic Key Verification (AKV), which uses a new open-source key transparency server with a log tree ledger and prefix tree index to detect if someone has tampered with public encryption keys to intercept messages. Users can tap 'Verify automatically' on a contact's safety number screen to get a green checkmark confirming the key matches Signal's key transparency system. A key caveat: you need your contact's phone number for this to work.

Why: If you ship or rely on end-to-end encrypted messaging, Signal's key transparency architecture is a working reference design for detecting man-in-the-middle attacks without manual safety number comparison. Builders designing similar systems should study the ledger-plus-index approach, but note the phone-number dependency limits its applicability for username-only or identifier-agnostic systems.

Nvidia has lined up $500 billion in financing through agreements with six major Wall Street firms (BlackRock, Blackstone, Apollo, KKR, Brookfield, Goldman Sachs) to fund AI infrastructure buildout, treating chips as long-term financial assets. Analysts warn that if China floods the market with low-cost compute, rapid hardware depreciation could crash the collateral values backing these loans, pushing investor yield demands to 11-17%.

Why: If Chinese low-cost compute enters the market and accelerates GPU depreciation, cloud compute prices could drop significantly — builders and founders should factor in the possibility of much cheaper inference costs within 1-2 years when making infrastructure and pricing decisions, rather than locking into long-term GPU commitments at today's rates.

Three Zoom annotation-tool flaws allowed any meeting participant to hijack another attendee's client with no victim interaction—no click, download, or prompt required. Patches shipped in June and July 2026 (Zoom Workplace before 7.1.5/7.0.6, VDI Client before 7.0.11/6.6.16, Rooms/SDK before 7.1.0/7.1.5), with no exploitation reported. Researcher 'A Security' claims they went from finding the flaw to a working exploit in under a day using fewer than 20 prompts on unnamed publicly available AI models, exploiting a 128-byte buffer overflow in annotation data parsing and a missing origin check that let one malformed drawing reach the entire room.

Why: If your team runs Zoom Workplace, VDI Client, Rooms, or embeds the Meeting SDK, verify you are past the patched versions—older clients remain exploitable by anyone in a meeting with zero victim interaction. The AI-assisted exploit claim (under 20 prompts, under a day) is unverifiable since no model is named, but it signals that offensive security tooling is cheapening fast; builders shipping client software with binary protocol parsing should treat untrusted-length-field bugs as findable by adversaries with minimal effort.

Bitcoin miner Riot Platforms signed a $9.1 billion, 20-year deal with Anthropic to lease 191 megawatts at its Rockdale, Texas campus, giving Anthropic access to grid-connected power for AI compute. The deal could rise to ~$16.1 billion if extended for two additional five-year periods, and follows Riot's existing AMD agreement, bringing total contracted data center revenue to $9.8 billion.

Why: AI compute demand is now reshaping infrastructure markets beyond traditional data center players—Bitcoin miners with grid-connected power are becoming AI landlords. For builders in Southeast Asia, this signals that AI inference and training capacity will increasingly be constrained by power and grid access, not just chip supply, which affects cloud pricing and availability of GPU-backed services you depend on.

River AI, founded by xAI co-founder Igor Babuschkin, raised $1.1B in a seed/Series A led by General Catalyst and AMP PBC, with Nvidia, AMD Ventures, Y Combinator, and Temasek participating. The company, which exited stealth in June 2026, already offers an API billed per million tokens that supports RL and LoRA fine-tuning on open models, positioning itself as an alternative to prompt engineering by letting developers train models they own rather than steer ones they don't.

Why: If you're currently relying on prompt engineering against closed models, River's API offers a concrete alternative: fine-tune open models with RL and LoRA and serve them as endpoints you control. Temasek's participation signals sovereign-fund interest in AI infrastructure that could ripple into Southeast Asian deployment and partnerships. Evaluate whether per-million-token fine-tuning economics beat your current prompt-heavy workflow.

xAI launched Grok Bot in early beta, an AI agent product that can log into your tools, use websites and apps like a human would, and complete multi-step work autonomously. Bots can be taught workflows by demonstration (you do it once, it records and repeats), run in parallel on different tasks, share context with each other, and retain memory over time. The macOS download link points to cursor.com, indicating a Cursor partnership.

Why: If you build SaaS or internal tools, Grok Bot's 'computer use' approach means AI agents may soon interact with your product's UI the way human users do—not via API—so consider whether your workflows are legible to non-human operators. For founders, the teach-by-demonstration model could reduce operational headcount for repetitive tasks like support queues, outbound, and expense management, though it's early beta with no pricing disclosed.

Modular has released Mojo 1.0, marking the language as stable and production-ready after development since 2023. The release consolidates syntax (unified `var` declarations, single `Pointer` type, Python-style lambdas), and Modular now uses Mojo internally as the foundation of its commercial MAX and Modular Cloud products. The open-source standard library has attracted nearly 200 contributors with over 1,100 merged PRs.

Why: If you've been waiting for Mojo to stabilize before investing time, 1.0 means breaking changes should now be additive and managed like mature languages — you can build long-term projects without the language shifting beneath you. The LSP improvements and unified syntax also mean the developer experience is closer to Python's than earlier experimental releases.

Anthropic announced that an unreleased model made progress on the Riemann hypothesis by increasing the lower bound of solutions for which it holds true. A non-mathematician staff member prompted the model to attempt the problem, then the model autonomously coordinated 60 sub-agents over 1.5 days, testing 650 ideas and spending 31 million tokens. Two sub-agents developed the key mathematical ideas, 13 contributed supporting ideas, 30 failed to develop new ideas, 13 validated, and 2 wrote the paper; results were confirmed via the Lean proof assistant.

Why: The concrete takeaway for builders is the multi-agent orchestration pattern: a single prompt spawned 60 sub-agents with distinct roles (generators, validators, writers) that ran autonomously for 1.5 days at 31M tokens. If you build AI agent systems, this is a working blueprint for decomposing hard open-ended tasks into specialized agent roles with built-in validation — though the cost profile (31M tokens for one problem) sets realistic expectations for what autonomous agent swarms actually consume.

Manus, a general-purpose AI agent startup founded in China in 2022 and later relocated to Singapore, will resume operating as an independent company after Chinese regulators forced Meta to unwind its $2 billion acquisition. China's National Development and Reform Commission ruled in April 2026 that the deal violated foreign investment rules, and Manus is now notifying users that some will need to back up data generated on or after December 29, 2025.

Why: If you or your team use Manus AI agents, act on the data backup notice now—data generated after Dec 29, 2025 may not survive the unwinding transition. More broadly, Beijing's tightened export controls on cross-border AI deals mean any SEA-based builder relying on AI tools with Chinese origins or ownership stakes should expect regulatory disruption to continuity of service.

The trycua/cua project published a blog post on using GPU passthrough in macOS VMs to accelerate llama.cpp-based LLM inference on Apple Silicon. The post details the technical approach for passing Apple GPU resources through to a virtualized macOS environment.

Why: If you run local LLM inference on Apple Silicon but need VM isolation for CI, agent sandboxes, or multi-tenant setups, this approach could let you keep near-native Metal GPU performance inside a VM rather than falling back to CPU-only inference. Builders evaluating local agent infrastructure should test whether the passthrough overhead is acceptable for their workload before committing to a bare-metal-only deployment.