AI Weekly Malaysia

Research by agent security platform Reco identifies a single server (158.220.87.79 on a Contabo VPS in Germany) that has been scraping Salesforce Experience Cloud and ServiceNow Service Portal sites since at least March 2025, targeting telecoms, banks, enterprise software vendors, and public sector portals. The attacker uses a compiled Go program (fingerprinted via net/http default user agent) that goes beyond known Aura guest-access abuse by also hitting Salesforce's Lightning Web Runtime UI-API across versions v56.0–v66.0 and an undocumented ServiceNow endpoint POST /api/now/sp/search. One target logged over 560,000 events from the same IP.

Why: If your organization runs a Salesforce Experience Cloud site or ServiceNow Service Portal with a public-facing guest user, audit that guest profile's object and field permissions now—Reco's findings show the guest identity is the common exploit vector across all techniques, and it can only be restricted, not deleted. Malaysian banks, telecoms, and government portals are in the target profile, so local teams using these platforms should verify guest access is scoped to only what the public site actually needs.

DataDome researchers report that scalper bots now outnumber human shoppers 10-to-1 on at least one retailer's DDR5 listing pages, hitting listings every 6.5 seconds. 32GB DDR5 kits have surged from $72 to $392, a roughly 5x price increase driven by automated scraping and hoarding.

Why: If you're budgeting for local AI/ML workstations or homelab builds in Malaysia, DDR5 pricing is currently distorted well beyond MSRP by bot activity—factor this into hardware procurement timelines or consider DDR4 alternatives where the platform allows it. For anyone building e-commerce or inventory-tracking systems, this is a concrete data point on how aggressive automated scraping has become and why bot mitigation (DataDome-style) is now table stakes for retail platforms.

The article text was not captured — only cookie consent boilerplate is present, with no substantive content about the Chinese reusable rocket landing referenced in the title.

Why: No actionable detail is available from the captured text. Readers should not draw conclusions from the headline alone; revisit the source directly if the topic is relevant.

The article text provided contains only cookie consent and privacy policy boilerplate from Ars Technica, with no substantive content about pesticides, temperatures, or farmworkers.

Why: No actionable content is available from the provided text. The headline suggests a climate/agriculture science story, but the article body is missing entirely.

The article URL points to an Ars Technica story about the only known trebuchet casualty in history, but the extracted text contains only cookie consent and privacy policy boilerplate—no article content was captured.

Why: No usable content was extracted; there is nothing actionable for builders, developers, or founders here. The scraping failed to capture the actual article.