Friday, 31 July 2026 · Daily Market Intel

Market Intel Fri, 31 Jul

Software keeps getting free; the gates move to power and borders.

Physical chokepoints focus · commodity software · licensed rails

Tech Breakthroughs
- Defence gets cheaper than attack: Microsoft's 5B-active cyber model clears 95.95% on CyberGym — MarkTechPost
  
  MAI-Cyber-1-Flash activates 5B of 137B parameters and handles 90% of Microsoft's MDASH pipeline, escalating the hardest tenth to GPT-5.4. The system's CyberGym score rose from 88.45% in May at half the previous cost.
  
  Positive-sum angle: A model trained to patch rather than exploit turns vulnerability triage into a cost line small teams can carry. Every fix it lands upstream, sixteen CVEs so far in Windows networking and authentication, hardens the same dependencies that regional banks, telcos and startups all ship on.
  
  What's the impact: SEA operators running lean security teams should budget triage at commodity rates and spend the saving on response capacity. Banks under MAS and Bank Indonesia review should ask vendors which tier of model reads their code before the next penetration test.
Emerging Industries
- China ships 85% of the world's humanoid robots; the FCC just closed the American border — CNN
  
  The FCC barred imports of foreign-made humanoid and quadruped robots on national-security grounds. Of roughly 15,000 humanoids shipped globally in 2025, Unitree and AGIBOT each moved more than 5,000; Tesla and Figure each shipped a few hundred.
  
  Positive-sum angle: A closed American market pushes Chinese makers toward the buyers still open to them, and Southeast Asia's factories, ports and hospitals sit first in line. Cheaper units arriving under real competition lift every integrator, trainer and maintenance shop selling the labour around the machine.
  
  What's the impact: ASEAN manufacturers should price humanoid pilots against redirected supply, not last year's quote. Integrators in Penang, Batam and Ho Chi Minh City should build the service and training layer now, before the units land and the maintenance contracts get written.
- Singapore holds 1.46GW of data centres and is building 20MW; Johor takes the rest — TechNode Global
  
  BMI expects Singapore to keep Tier-1 status on 1.46GW of live capacity, with just 20MW under construction against a 980MW pipeline. Compliant supply stays below demand as AI workloads grow, and Johor absorbs the spillover.
  
  Positive-sum angle: Scarcity in Singapore prices the whole corridor. Johor, Batam and Bangkok take the overflow, and the constraint pulls capital toward the things that relieve it: grid upgrades, water-efficient cooling, and the green power agreements the city's approval framework now demands.
  
  What's the impact: SEA founders with training workloads should reserve capacity across the Causeway on multi-year terms rather than assume Singapore availability. Energy and cooling builders should chase the DC-CFA2 allocation and the Jurong Island pipeline before the 2027 procurement window shuts.
Open Source Projects
- Open source stops at the client: OpenAI ships Codex Security under Apache 2.0, keeps the scanner — DevOps.com
  
  OpenAI published the Codex Security CLI and SDK under Apache 2.0 on 29 July. The code scans repositories and fails CI above a severity threshold, but the analysis backend runs on OpenAI's hosted service.
  
  Positive-sum angle: A permissive client still moves the industry. Teams can read the scan contract, wire it into any pipeline, and export findings to other tools, which pushes every appsec vendor toward one interface and makes the detection layer the thing worth competing on.
  
  What's the impact: SEA engineering teams should adopt the interface and keep the detection layer swappable, since full scans route through OpenAI's paid tier. Anyone carrying data-residency duties under PDPA or MAS rules should confirm where the code travels before wiring it into CI.
Business Models
- One company took 70% of the money: SEA's 12 top payment firms raised $2.7 billion — TechNode Global
  
  Tracxn counts $2.7 billion across Southeast Asia's 12 leading payment companies, with Airwallex holding $1.9 billion of it. Singapore hosts nine of the twelve; Indonesia and Vietnam hold the rest. Most sit at seed or Series A.
  
  Positive-sum angle: Concentration at the top funds rails everyone else builds on. Cross-border settlement, treasury and embedded-finance infrastructure paid for once gets resold to thousands of merchants, and the long seed-stage tail shows the layer above those rails is still open ground.
  
  What's the impact: SEA fintech founders should stop competing on cross-border settlement and build on it. The open ground sits in merchant tooling, payroll and treasury for Indonesian and Vietnamese SMEs, where three of this year's four rounds closed under $15 million.