AI Weekly Malaysia

Discovered Materials, founded by Advaith Sridhar and Akash Ramdas, raised a $9M seed from Lightspeed India Partners, Peak XV, and angels including Paul Graham after exiting Y Combinator. The startup uses a pipeline of Anthropic models in a custom harness to generate candidate semiconductor materials, then validates them with trained foundational physics models, claiming thousands of guesses per day versus Ramdas's 20/day during his Stanford PhD.

Why: For AI agent builders, the architecture pattern is worth noting: LLMs for hypothesis generation paired with domain-specific simulation models for verification, running 24/7 in the cloud. However, this is primarily a materials science play with no direct tooling, API, or product the audience can adopt, and the claimed material discoveries are undisclosed.

North Korea's Lazarus Group exploited CVE-2026-68820, a Windows AFD.sys privilege escalation flaw (CVSS 7.0) patched in August 2026 Patch Tuesday, to deploy a new backdoor called Troy against defense and aerospace companies in France, Germany, Brazil, and India. The campaign used fake LinkedIn recruiter messages and trojanized PDF viewers to deliver malware via DLL side-loading, with C2 communication through Microsoft Graph API and OneDrive.

Why: If you or your team are in defense, aerospace, or adjacent industries and receive unsolicited recruiter outreach with PDF attachments on LinkedIn, treat it as a potential intrusion vector — the infection chain starts with opening a malicious PDF or installing a trojanized PDF viewer. For everyone else, this is a reminder that Microsoft Graph API and OneDrive are increasingly abused for malware C2, which may affect egress filtering decisions.