Slashdot

Cloudflare blocked the largest-ever DDoS attack against a European network infrastructure company, which peaked at 22.2 Tbps and 10.6 Bpps. The hyper-volumetric attack has been linked to the Aisuru botnet and lasted just 40 seconds, but was double the size of the previous record. SecurityWeek reports: Cloudflare told SecurityWeek that the attack was aimed at a single IP address of an unnamed European network infrastructure company. Cloudflare has yet to determine who was behind the attack, but believes it may have been powered by the Aisuru botnet, which was also linked earlier this year to a massive 6.3 Tbps attack on the website of cybersecurity blogger Brian Krebs. Aisuru has been around for more than a year. The botnet is powered by hacked IoT devices such as routers and DVRs that have been compromised through the exploitation of known and zero-day vulnerabilities. According to Cloudflare, the 22 Tbps attack was traced to over 404,000 unique source IPs across over 14 ASNs worldwide. "Based on internal analysis using a proprietary system, the source IPs were not spoofed," the company explained. The security firm described it as a UDP carpet bomb attack targeting an average of 31,000 destination ports per second, with a peak of 47k ports, all of a single IP address. Cloudflare revealed in July that the number of DDoS attacks it blocked in the first half of 2025 had already exceeded all the attacks mitigated in 2024.

Read more of this story at Slashdot.

Fossil fuel burning is not just damaging the world's climate; it is also threatening the health of at least 1.6 billion people through the toxic pollutants it produces, data shows. From a report: Carbon dioxide, the main greenhouse gas from fossil fuel burning, does not directly damage health, but leads to global heating. However, coal and oil burning for power generation, and the burning of fossil fuels in industrial facilities, pollute the air with particulate matter called PM2.5, which has serious health impacts when breathed in. A new interactive map from Climate Trace, a coalition of academics and analysts that tracks pollution and greenhouse gases, shows that PM2.5 and other toxins are being poured into the air near the homes of about 1.6 billion people. Of these, about 900 million are in the path of "super-emitting" industrial facilities -- including power plants, refineries, ports and mines -- that deliver outsize doses of toxic air.

Read more of this story at Slashdot.

BrianFagioli shares a report from NERDS.xyz: Cloudflare has unveiled the Content Signals Policy, a free addition to its managed robots.txt service that aims to give website owners and publishers more control over how their content is accessed and reused by AI companies. The idea is pretty simple: robots.txt already lets site operators specify which crawlers can enter and where. Cloudflare's new policy adds a layer that signals how the data may be used once accessed, with plain-language terms for search, AI input, and AI training. "Yes" means allowed, "no" means not allowed, and no signal means no preference. Matthew Prince, Cloudflare's co-founder and CEO, said: "The Internet cannot wait for a solution, while in the meantime, creators' original content is used for profit by other companies. To ensure the web remains open and thriving, we're giving website owners a better way to express how companies are allowed to use their content." Cloudflare says more than 3.8 million domains already use its robots.txt tools to signal they don't want their content used for AI training. Now, the Content Signals Policy makes those preferences clearer and potentially enforceable. Further reading: Cloudflare Flips AI Scraping Model With Pay-Per-Crawl System For Publishers

Read more of this story at Slashdot.

An anonymous reader quotes a report from The Guardian: After deflecting the US Department of Justice's attack on its illegal monopoly in online search, Google is facing another attempt to dismantle its internet empire in a trial focused on abusive tactics in digital advertising. The trial that opened Monday in an Alexandria, Virginia, federal court revolves around the harmful conduct that resulted in US district Judge Leonie Brinkema declaring parts of Google's digital advertising technology to be an illegal monopoly in April. The judge found that Google has been engaging in behavior that stifles competition to the detriment of online publishers that depend on the system for revenue. Google and the justice department will spend the next two weeks in court presenting evidence in a "remedy" trial that will culminate in Brinkema issuing a ruling on how to restore fair market conditions. If the justice department gets its way, Brinkema will order Google to sell parts of its ad technology -- a proposal that the company's lawyers warned would "invite disruption and damage" to consumers and the internet's ecosystem. The justice department contends a breakup would be the most effective and quickest way to undercut a monopoly that has been stifling competition and innovation for years. [...] The case, filed in 2023 under Joe Biden's administration, threatens the complex network that Google has spent the past 17 years building to power its dominant digital advertising business. Digital advertising sales account for most of the $305 billion in revenue that Google's services division generates for its corporate parent Alphabet. The company's sprawling network of display ads provide the lifeblood that keeps thousands of websites alive. Google believes it has already made enough changes to its "ad manager" system, including providing more options and pricing options, to resolve the problems Brinkema flagged in her monopoly ruling.

Read more of this story at Slashdot.

Microsoft on Sept 24 announced new options for US and European customers to safely extend the life of the Windows 10 operating system free of charge just days before a key deadline to upgrade to Windows 11. From a report: The US tech giant plans to end support for Windows 10 on Oct 14, a move that has drawn criticism from consumer advocacy groups and sparked concerns among users who fear they will need to purchase new computers to stay protected from cyber threats. Users who are unable to upgrade or choose to forgo the extended security updates will face increased vulnerability to cyberattacks. In response to these concerns, Microsoft informed European users that essential security updates will be extended for one year at no additional cost, provided they log in with a Microsoft account. Previously, the company had offered a one-year extension of Windows 10 security updates for $30 to users whose hardware is incompatible with Windows 11. In the US, a similar free option will allow users to upload their Windows 10 profiles to Microsoft's backup service and receive security updates for up to one year.

Read more of this story at Slashdot.

Pocket Casts is being flogged for showing advertisements to legacy users who were promised an ad-free experience. From a report: The first reports started to appear in early September in the Pocket Casts support forum and subreddit. The issue is a bug, according to Matt Mullenweg, the CEO of Pocket Casts' parent company Automattic, and will be corrected. Pocket Casts launched as a purchase-only app in 2010, charging users a one-time download fee of up to $10, depending on the OS and platform. The service later switched to a subscription-based model and made the app available for free in 2019. After backlash from users, the company gave anyone who paid for the web or desktop apps before the pricing changes free lifetime access to Pocket Casts Plus, its ad-free premium subscription service. The app was acquired by Automattic in 2021, and the Pocket Casts Lifetime memberships were rebranded to "Pocket Casts Champion" in August 2024.

Read more of this story at Slashdot.

Australian horror film Together, starring Dave Franco and Alison Brie, underwent digital alterations for its mainland China release on September 12. Chinese cinemagoers discovered that a wedding scene between two men had been modified using face-swapping technology to transform one male character into a female appearance. The change only became apparent after side-by-side screenshots from the original and altered versions circulated on social media platforms. Chinese viewers are expressing outrage over the AI-powered modification, The Guardian reports, citing concerns about creative integrity and the difficulty of detecting such alterations compared to traditional scene cuts. The film's distributor halted the scheduled September 19 general release following the backlash. China's censorship authorities require all imported films to undergo approval before release.

Read more of this story at Slashdot.

Qualcomm CEO Cristiano Amon told attendees at yesterday's Snapdragon Summit opening keynote that he has seen Google's merged Android-ChromeOS platform for PCs. Speaking alongside Google's head of platforms and devices Rick Osterloh, Amon said the software "delivers on the vision of convergence of mobile and PC" and that he "can't wait to have one." Osterloh confirmed Google is building a common technical foundation for PCs and desktop computing systems that combines Android and ChromeOS. The platform will include Gemini, the full Android AI stack, all Google applications and the Android developer community. "I've seen it, it is incredible," replied Amon excitedly. "It delivers on the vision of convergence of mobile and PC. I can't wait to have one."

Read more of this story at Slashdot.

Private equity firms are facing systemic challenges after a half-century of meteoric growth as attractive takeover targets become scarce and financing costs remain elevated while exits prove increasingly difficult. US buyout funds currently hold more than 12,000 companies that would take approximately nine years to fully distribute at current rates, according to PitchBook data. The industry holds $1.2 trillion in dry powder and nearly a quarter of that capital was pledged at least four years ago. More than 18,000 private capital funds seek $3.3 trillion from increasingly reluctant investors, Bain estimates. Quarterly returns for US private equity funds fell from 13.5% in Q2 2021 to 0.8% in Q4 2024. Apollo President Jim Zelter described the situation as a "natural washout" at an investor conference this month. Charles Wilson of Selby Jennings added that "many PE firms are dead already, they just don't know it" and noted survival depends on how forgiving limited partners -- the entities, including pension funds and endowments, that have invested in private equity firms -- prove when firms return for new fundraising.

Read more of this story at Slashdot.

CNBC: Instagram now has 3 billion monthly active users, Meta CEO Mark Zuckerberg said Wednesday on his Instagram account. "What an incredible community we've built here," Zuckerberg posted on his Instagram channel. The figure is a major milestone for the photo-sharing app, which the social media company acquired in 2012 for $1 billion. Meta last disclosed Instagram's user figures in October 2022 when Zuckerberg said during an earnings call that the app had crossed 2 billion monthly users.

Read more of this story at Slashdot.

An anonymous reader shares a report: Last year, the AI video company Runway joined forces with the major Hollywood studio Lionsgate in a partnership the pair hoped would result in AI-generated scenes and even potentially full-length movies. But the project has hit a snag. According to a report by The Wrap, the past 12 months have been unproductive. Lionsgate distributes Hollywood blockbusters including The Hunger Games, John Wick, The Twilight Saga, and Saw franchises. But despite its huge catalog, it is simply not enough for the AI to produce quality content. "The Lionsgate catalog is too small to create a model," a source tells The Wrap. "In fact, the Disney catalog is too small to create a model." Despite Runway being one of the leading names in AI video, the technology needs a copious amount of data to produce AI-generated films. It is the reason AI has proven to be such an unpopular technology, as AI firms help themselves to any type of media they can get their hands on -- whether it has copyright protections or not. Another issue is the rights of actors and the model for remuneration if their likeness appears in an AI-generated clip. It is a legal gray area with no clear path.

Read more of this story at Slashdot.

Microsoft AI CEO Mustafa Suleyman told The Verge today that the company plans to transform Edge into an "agentic browser" where Copilot controls tabs, navigates websites and completes tasks while users watch. Unlike The Browser Company's new Dia browser, Microsoft will integrate these capabilities directly into Edge. Suleyman described Copilot opening tabs, reading multiple pages simultaneously and performing research transparently in real-time. The AI visits websites directly, preserving publisher traffic. Current Copilot features include tab navigation, page scrolling and content highlighting. Users will have the option to disable AI features entirely. Suleyman predicted that within years, AI companions will handle most browsing tasks while users provide oversight and feedback.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Reuters: OpenAI, Oracle, and SoftBank on Tuesday announced plans for five new artificial intelligence data centers in the United States to build out their ambitious Stargate project. [...] ChatGPT-maker OpenAI said on Tuesday it will open three new sites with Oracle in Shackelford County, Texas, Dona Ana County, New Mexico and an undisclosed site in the Midwest. Two more data center sites will be built in Lordstown, Ohio and Milam County, Texas by OpenAI, Japan's SoftBank and a SoftBank affiliate. The new sites, the Oracle-OpenAI site expansion in Abilene, Texas, and the ongoing projects with CoreWeave will bring Stargate's total data center capacity to nearly 7 gigawatts and more than $400 billion in investment over the next three years, OpenAI said. The $500 billion project was intended to generate 10 gigawatts in total data center capacity. "AI can only fulfill its promise if we build the compute to power it," OpenAI CEO Sam Altman said in a statement. The Tuesday's announcement, expected to create 25,000 onsite jobs, follows Nvidia saying on Monday that it will invest up to $100 billion in OpenAI and supply data center chips. OpenAI and partners plan to use debt financing to lease chips for the Stargate project, people familiar with the matter said.

Read more of this story at Slashdot.

Jaguar Land Rover has halted production for nearly a month following a major cyberattack, costing an estimated 30,000 vehicles and billions in lost revenue. "The company said on Tuesday that production would be halted for another week until at least October 1, which increased concerns that a full return to production could be months away," reports The Times. From the report: David Bailey, professor of business economics at Birmingham University, said the JLR statement did not commit to reopening production on October 1 and even if it did "it's not going to be back to normal, but phased production start with some lines opening before others, as we saw after the Covid closure back in 2020." He said: "It's 24 days [shutdown] as of September 24. So that is roughly 1,000 cars a day, 24,000 cars not produced. So by then, that's about 1.7 billion pounds in lost revenue. By October 1, it will be a hit to revenue of something like 2.2 billion pounds. It's pretty massive. JLR can get through, but they're going to be burning through cash this month." Bailey also raised concerns that smaller companies further down the supply chain lacked the cash reserves to withstand the shutdown. The company directly employs more than 30,000 people, and it is estimated that approximately 200,000 workers in the supply chain depend on work from JLR. "The union has said that in some cases, staff have been told to go and apply for universal credit. There are firms I know that have applied for bank loans to keep going. But even then, you know they're approaching the limit of what they do. There's an added knock-on effect that some of the suppliers also supply other car assemblers, Toyota or Mini. So some of those are concerned that bits of the supply chain may go under and affect them as well, because the industry is so connected. One way or another, the government's going to take a hit. Either through some sort of emergency support, whether that's furlough or emergency short-term loans or through unemployment benefit, if this carries on." There has been uncertainty over the extent of the cyberattack and exactly how the company has been affected, as well as who is responsible for it. According to one source, some JLR staff were still unable last week to access the Slack messaging system through the company's "one sign on" system. The JLR statement added: "We have made this decision to give clarity for the coming week as we build the timeline for the phased restart of our operations and continue our investigation."

Read more of this story at Slashdot.

NASA aims to launch its first crewed lunar mission in over 50 years, as early as February. The 10-day Artemis II mission will send four astronauts on a lunar flyby to test systems, paving the way for future Moon landings under the Artemis program. The BBC reports: Lakiesha Hawkins, Nasa's acting deputy associate administrator said it would be an important moment in the human exploration of space. "We together have a front row seat to history," she told a news conference this afternoon. "The launch window could open as early as the fifth of February, but we want to emphasize that safety is our top priority." Artemis Launch Director, Charlie Blackwell-Thompson explained that the powerful rocket system built to take the astronauts to the Moon, the Space Launch System (SLS) was "pretty much stacked and ready to go." All that remained was to complete the crew capsule, called Orion, connected to SLS and to complete ground tests. The Artemis II launch will see four astronauts go on a ten-day round trip to the Moon and back to the Earth. The astronauts, Reid Wiseman, Victor Glover, and Christina Koch, of Nasa and Jeremy Hansen of the Canadian Space Agency, will not land on the Moon, though they will be the first crew to travel beyond low Earth orbit since Apollo 17 in 1972. The lead Artemis II flight director, Jeff Radigan explained that the crew would be flying further into space than anyone had been before. "They're going at least 5,000 nautical miles (9,200Km) past the Moon, which is much higher than previous missions have gone," he told reporters. Further reading: NASA Introduces 10 New Astronaut Candidates

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: If an Iranian taxi driver waves away your payment, saying, "Be my guest this time," accepting their offer would be a cultural disaster. They expect you to insist on paying -- probably three times -- before they'll take your money. This dance of refusal and counter-refusal, called taarof, governs countless daily interactions in Persian culture. And AI models are terrible at it. New research released earlier this month titled "We Politely Insist: Your LLM Must Learn the Persian Art of Taarof" shows that mainstream AI language models from OpenAI, Anthropic, and Meta fail to absorb these Persian social rituals, correctly navigating taarof situations only 34 to 42 percent of the time. Native Persian speakers, by contrast, get it right 82 percent of the time. This performance gap persists across large language models such as GPT-4o, Claude 3.5 Haiku, Llama 3, DeepSeek V3, and Dorna, a Persian-tuned variant of Llama 3. A study led by Nikta Gohari Sadr of Brock University, along with researchers from Emory University and other institutions, introduces "TAAROFBENCH," the first benchmark for measuring how well AI systems reproduce this intricate cultural practice. The researchers' findings show how recent AI models default to Western-style directness, completely missing the cultural cues that govern everyday interactions for millions of Persian speakers worldwide. "Cultural missteps in high-consequence settings can derail negotiations, damage relationships, and reinforce stereotypes," the researchers write. "Taarof, a core element of Persian etiquette, is a system of ritual politeness where what is said often differs from what is meant," the researchers write. "It takes the form of ritualized exchanges: offering repeatedly despite initial refusals, declining gifts while the giver insists, and deflecting compliments while the other party reaffirms them. This 'polite verbal wrestling' (Rafiee, 1991) involves a delicate dance of offer and refusal, insistence and resistance, which shapes everyday interactions in Iranian culture, creating implicit rules for how generosity, gratitude, and requests are expressed."

Read more of this story at Slashdot.

Longtime Slashdot reader schwit1 shares a report from ICO Bench: As of September 1, 2025, banks across Vietnam are closing accounts deemed inactive or non-compliant with new biometric rules. Authorities estimate that more than 86 million accounts out of roughly 200 million are at risk if users fail to update their identity verification. The State Bank of Vietnam has also introduced stricter thresholds for transactions: - Facial authentication is mandatory for online transfers above 10 million VND (about $379). - Cumulative daily transfers over 20 million VND ($758) also require biometric approval. The policy is part of the central bank's broader "cashless" strategy, aimed at combating fraud, identity theft, and deepfake-enabled scams. [...] While many Vietnamese citizens have updated their biometric data without issue, the measure has disproportionately affected foreign residents and expatriates who cannot easily return to local branches and dormant accounts that had been left inactive for years. schwit1 highlights a post on X from Bitcoin expert and TFTC.io founder Marty Bent: "If users don't comply by the 30th they'll lose their money. This is why we bitcoin."

Read more of this story at Slashdot.

Disney is raising prices again for Disney+, Hulu, and ESPN Select starting October 21, 2025, with most ad-supported tiers going up by $2-3 per month and bundles also seeing increases. It marks the third consecutive year of U.S. streaming price hikes. Variety reports: It's that time of year again, apparently: Disney is raising the prices of its Disney+ and Hulu plans in the U.S., including most bundles, as of next month. The standalone Disney+ with ads service is rising from $9.99 to $11.99/month on Oct. 21, 2025, while the Disney+ Premium (without ads) is going from $15.99 to $18.99/month. The Hulu standalone plan with ads is increasing from $9.99 to $11.99/month as of the same date; the premium version of Hulu with no ads will remain at $18.99 per month. In addition, the price of ESPN Select (the service formerly known as ESPN+, which has a more limited content lineup than the recently launched ESPN Unlimited all-in app) will increase from $11.99 to $12.99 per month on Oct. 21. For now, the introductory price of the Disney+, Hulu and ESPN Unlimited bundle with ads will remain $29.99 per month (for the first 12 months). It's the third time in three years Disney is raising the prices of the streaming services in the U.S., after price hikes for Disney+ and Hulu in October 2024 and in October 2023. Disney provided notifications of the latest price hikes Tuesday on its customer support sites.

Read more of this story at Slashdot.

Microsoft is preparing a Publisher Content Marketplace to pay publishers when their work is used in AI products like Copilot. Neowin reports: Microsoft is reportedly discussing with select US publishers a pilot program for its so-called Publisher Content Marketplace, a system that pays publishers for their content when it gets used by AI products, starting with its own Copilot assistant. The PCM will launch with a limited number of partners before Microsoft hopes to expand the program over time. The company pitched the idea to publishing executives at an invite-only Partner Summit in Monaco last week. Microsoft was allegedly courting them with the message: "You deserve to be paid on the quality of your IP." No concrete launch date for the pilot was shared. As Axios notes, Microsoft is the first major company to try to build a proper AI marketplace for publishers. Other AI labs like OpenAI have mostly focused on securing one-off licensing deals instead of building a platform for ongoing transactions. Companies like Cloudflare are also working on a more technical, network-level solution to this problem.

Read more of this story at Slashdot.

An anonymous reader quotes a report from InsideEVs: On Monday morning, I spoke to a Volvo EX90 owner who reported a litany of issues with her 2025 EX90: malfunctioning phone-as-a-key functionality, a useless keyfob, a keycard that rarely worked quickly, constant phone connection issues, infotainment glitches and error messages. I was surprised not because I hadn't heard of these kinds of problems, but because I experienced them myself over a year ago at the EX90 first drive again. At the time, Volvo said software fixes were imminent. Today, we know the issues go deeper. To solve them, Volvo announced on Tuesday that it will replace the central computer of every 2025 EX90 with the new one from the 2026 EX90. It's a tacit admission that the company can't solve the EX90's issues while simultaneously launching its next-generation software-defined vehicles, and that it's easier to replace the original computer than to build bug-free software for it. But for some, the damage to the Volvo brand has already been done. "I say without exaggeration that this car is a dumpster fire inside a train wreck," InsideEVs reader and EX90 owner Sally Greer told InsideEVs. The report notes that Volvo will replace the computer inside the 2025 EX90 with a Nvidia Drive AGX Orin-based core computer that has contains over 500 TOPS (Trillion Operations Per Second) of power, which Volvo says will help power its autonomous driving ambitions.

Read more of this story at Slashdot.