Windows

Microsoft is Killing off Windows 11's Mail and Calendar Apps By the End of the Year (theverge.com) 81

Microsoft is planning to no longer support the Windows Mail, Calendar, and People apps later this year. The Verge: The software giant has been moving existing users of these apps over to the new Outlook for Windows app in recent months, and now it has set an end of support date for the Mail, Calendar, and People apps of December 31st.

Once the apps reach end of support later this year, Microsoft warns that users who haven't moved to the new Outlook app "will no longer be able to send and receive email using Windows Mail and Calendar."

Microsoft has been rolling out the new Outlook for Windows app for years, with it officially reaching the general availability stage in August. The new web-based Outlook is designed to eventually replace the full desktop version of Outlook too, and Microsoft plans to provide enterprise customers a 12-month notice before it starts to move people away from the desktop version of Outlook.

United States

US Senate To Revive Software Patents With PERA Bill Vote On Thursday (eff.org) 111

zoobab writes: The US Senate to set to revive Software Patents with the PERA Bill, with a vote on Thursday, November 14, 2024.

A crucial Senate Committee is on the cusp of voting on two bills that would resurrect some of the most egregious software patents and embolden patent trolls. The Patent Eligibility Restoration Act (PERA), S. 2140, would dismantle vital safeguards that prohibit software patents on overly broad concepts. If passed, courts would be compelled to approve software patents on mundane activities like mobile food ordering or basic online financial transactions. This would unleash a torrent of vague and overbroad software patents, which would be wielded by patent trolls to extort small businesses and individuals.

The EFF is inviting members of the public to contact their Senators.

The Gimp

GIMP 3.0 Enters RC Testing After 20 Years (tomshardware.com) 55

GIMP 3.0, the long-awaited upgrade from the popular open-source image editor, has entered the release candidate phase, signaling that a stable version may be available by the end of this year or early 2025. Tom's Hardware reports: So, what has changed with the debut of GIMP 3? The new interface is still quite recognizable to classic GIMP users but has been considerably smoothed out and is far more scalable to high-resolution displays than it used to be. Several familiar icons have been carefully converted to SVGs or Scalable Vector Graphics, enabling supremely high-quality, scalable assets.

While PNGs, or Portable Network Graphics, are also known to be high-quality due to their lack of compression, they are still suboptimal compared to SVGs when SVGs are applicable. The work of converting GIMP's tool icons to SVG is still in progress per the original blog post, but it's good that developer Denis Rangelov has already started on the work.

Many aspects of the GIMP 3.0 update are almost wholly on the backend for ensuring project and plugin compatibility with past projects made with previous versions of GIMP. To summarize: a public GIMP API is being stabilized to make it easier to port GIMP 2.10-based plugins and scripts to GIMP 3.0. Several bugs related to color accuracy have been fixed to improve color management while still maintaining compatibility with past GIMP projects.
You can read the GIMP team's blog post here.
Android

Android 15's Virtual Machine Mandate is Aimed at Improving Security (androidauthority.com) 52

Google will require all new mobile chipsets launching with Android 15 to support its Android Virtualization Framework (AVF), a significant shift in the operating system's security architecture. The mandate, reports AndroidAuthority that got a hold of Android's latest Vendor Software Requirements document, affects major chipmakers including Qualcomm, MediaTek, and Samsung's Exynos division. New processors like the Snapdragon 8 Elite and Dimensity 9400 must implement AVF support to receive Android certification.

AVF, introduced with Android 13, creates isolated environments for security-sensitive operations including code compilation and DRM applications. The framework also enables full operating system virtualization, with Google demonstrating Chrome OS running in a virtual machine on Android devices.
Programming

Google Research Chief Says Learning To Code 'as Important as Ever' (businessinsider.com) 58

Google's head of research Yossi Matias maintains that learning to code remains "as important as ever" despite AI's growing role in software development. While AI tools have reduced coding time for some developers -- and Alphabet CEO Sundar Pichai noting that AI now generates a quarter of all code, Matias stressed that human engineers still review and approve AI-generated code.

The Google executive, who also serves as a company VP, acknowledged that junior professionals have faced challenges gaining experience as AI handles entry-level tasks. Google has launched initiatives to support early-career employees through this transition. Matias compared coding literacy to basic mathematics, arguing it provides crucial understanding of technology regardless of career path.
Books

Are America's Courts Going After Digital Libraries? (reason.com) 43

A new article at Reason.com argues that U.S. courts "are coming for digital libraries." In September, a federal appeals court dealt a major blow to the Internet Archive — one of the largest online repositories of free books, media, and software — in a copyright case with significant implications for publishers, libraries, and readers. The U.S. Court of Appeals for the 2nd Circuit upheld a lower court ruling that found the Internet Archive's huge, digitized lending library of copyrighted books was not covered by the "fair use" doctrine and infringed on the rights of publishers. Agreeing with the Archive's interpretation of fair use "would significantly narrow — if not entirely eviscerate — copyright owners' exclusive right to prepare derivative works," the 2nd Circuit ruled. "Were we to approve [Internet Archive's] use of the works, there would be little reason for consumers or libraries to pay publishers for content they could access for free."
Others disagree, according to some links shared in a recent email from the Internet Archive. Public Knowledge CEO Chris Lewis argues the court's logic renders the fair use doctrine "almost unusuable". And that's just the beginning... This decision harms libraries. It locks them into an e-book ecosystem designed to extract as much money as possible while harvesting (and reselling) reader data en masse. It leaves local communities' reading habits at the mercy of curatorial decisions made by four dominant publishing companies thousands of miles away. It steers Americans away from one of the few remaining bastions of privacy protection and funnels them into a surveillance ecosystem that, like Big Tech, becomes more dangerous with each passing data breach.
But lawyer/librarian Kyle K. Courtney writes that the case "is specific only to the parties, and does not impact the other existing versions of controlled digital lending." Additionally, this decision is limited to the 2nd Circuit and is not binding anywhere else — in other words, it does not apply to the 47 states outside the 2nd Circuit's jurisdiction. In talking with colleagues in the U.S. this week and last, many are continuing their programs because they believe their digital loaning programs fall outside the scope of this ruling... Moreover, the court's opinion focuses on digital books that the court said "are commercially available for sale or license in any electronic text format." Therefore, there remains a significant number of materials in library collections that have not made the jump to digital, nor are likely to, meaning that there is no ebook market to harm — nor is one likely to emerge for certain works, such as those that are no longer commercially viable...

This case represents just one instance in an ongoing conversation about library lending in the digital age, and the possibility of appeal to the U.S. Supreme Court means the final outcome is far from settled.

Some more quotes from links shared by Internet Archive:
  • "It was clear that the only reason all the big publishers sued the Internet Archive was to put another nail in the coffin of libraries and push to keep this ebook licensing scheme grift going. Now the courts have helped." — TechDirt
  • "The case against the Internet Archive is not just a story about the ruination of an online library, but a grander narrative of our times: how money facilitates the transference of knowledge away from the public, back towards the few." — blogger Hannah Williams

Thanks to Slashdot reader fjo3 for sharing the news.


AI

Salesforce to Hire 1,000 People for Big AI Product Sales Push (yahoo.com) 25

Salesforce "plans to hire more than 1,000 workers to sell its new generative AI agent product," reports Bloomberg: The hiring surge is aimed at capitalizing on "amazing momentum" for the new artificial intelligence product, Chief Executive Marc Benioff said in a message. "Agentforce became available just two weeks ago and we're already hearing incredible feedback from our customers."

The top seller of customer relations management software, Salesforce pivoted its AI strategy this year to focus on agents — tools that can complete tasks such as customer support or sales development without human supervision. It launched the product, dubbed Agentforce, last month, with initial pricing of about $2 per agent conversation.

GNU is Not Unix

Free Software Foundation Plans Year of Celebrations For Its 40th Anniversary (fsf.org) 22

The Free Software Foundation turns forty on October 4, 2025 "and we will end our thirties on a high note!" they announced this week: We wish we were celebrating the achievement of software freedom for all computer users, but we're not there yet. Until our mission becomes reality and we can retire, instead, we are celebrating forty years of activism, and all that we have achieved.

Since our founding in 1985, we laid out many stepping stones on the road to software freedom, and we're eager to continue building the road ahead. We will celebrate our fortieth in the spirit of bringing the international free software community together, discussing what we can do next to make the world freer, and celebrating how far we've come. We're aiming for a libre planet! Sounds familiar? Instead of hosting one LibrePlanet conference in 2025, we're planning a jam-packed anniversary year, filled with several new and exciting activities!

We'll begin the anniversary year with an unprecedented memorabilia auction, starting as a silent auction on March 17, and culminating in a virtual live auction on March 23. By moving out of the FSF office, we got to sort through all the fun and historically important memorabilia and selected the best ones. This is your chance to get your very own personal souvenir of the FSF, from original GNU art to a famous katana and the very same VT220 that was standing on the FSF's front desk, and which people used to display ASCII art or to play free software games.

Let's claim the month of May as libre planet (or libre local) month! We're inviting free software supporters like you anywhere in the world, to organize an in-person community meetup in your area to bring people together. We're setting up a small fund for these local gatherings, can send stickers, flyers, ideas and tips, and you can invite an FSF staff member to give a talk or workshop during your event and of course, we'll help promote it...

Then, on the actual birthday of the FSF on October 4, 2025, there will be a big celebration in Boston, MA, and the entire free software community is invited... These are just some of the big ticket items we have worked out, but there is more! Keep an eye out on the FSF's pages, we'll be posting exact information on everything upcoming.

They're looking for volunteers — and they also suggest organizing a community meetup in your area. Plus, there's also an FSF Anniversary Logo Contest. "We would like to source the fortieth anniversary logo design directly from a free software supporter. Everyone is welcome to submit a design (or even multiple designs) no matter your previous experience in design."

The winning design "will be chosen by the community and ultimately immortalized in the history of the FSF," according to the announcement — displayed on the FSF homepage, printed on all celebration materials, "and possibly even stamped on some merchandise." But of course, the contest's requirements include respecting everyone's freedoms: - The logo must be produced using exclusively free software editing tools, such as GIMP, Krita, or Inkscape;

- Any fonts used in the design must be under the SIL Open Font license or another free license...

"The final logo will be released under CC BY, attributed to the FSF."
Programming

The Team Behind GitHub's 'Atom' IDE Build a Cross-Platform, AI-Optional 'Zed Editor' (itsfoss.com) 29

Nathan Sobo "joined GitHub in late 2011 to build the Atom text editor," according to an online biography, "and he led the Atom team until 2018." Max Brunsfeld joined the Atom team in 2013, and "While driving Atom towards its 1.0 launch during the day, Max spent nights and weekends building Tree-sitter, a blazing-fast and expressive incremental parsing framework that currently powers all code analysis at GitHub."

Last year they teamed up with Antonio Scandurra (another Atom alumnus) to launch a new startup called Zed (which in 2023 raised $10 million, according to TechCrunch). And today the open source blog It's FOSS checks in on their open-source code editor — "Zed Editor". Mainly written in Rust, it supports running in CLI, diagnosing project-wide errors, split panes, and markdown previews: By default, any added content is treated as plain text. I used the language switcher to change it to Rust so that I would get proper syntax highlighting, indentation, error detection, and other useful language-specific functions. The switch highlighted all the Rust elements correctly, and I then focused on Zed Editor's user interface. The overall feel of the editor was minimal, with all the important options being laid out nicely.

[Its status bar] had some interesting panels. The first one I checked was the Terminal Panel, which, as the name suggests, lets you run commands, scripts, and facilitates interaction with system files or processes directly from within the editor. I then moved to the Assistant Panel, which is home to various large language models that can be integrated into Zed Editor. There are options like Anthropic, GitHub Copilot Chat, Ollama, OpenAI, and Google AI... The Zed Editor team has also recently introduced Zed AI in collaboration with Anthropic for assisting with coding, allowing for code generation, advanced context-powered interactions, and more...

The real-time collaboration features on Zed Editor are quite appealing too. To check them out, I had to log in with my GitHub account. After logging in, the Collab Panel opened up, and I could see many channels from the official Zed community. I could chat with others, add collaborators to existing projects, join a call with the option to share my screen and track other collaborators' cursors, add new contacts, and carry out many other collaborative tasks.

One can also use extensions and themes to extend what Zed Editor can do. There are some nice pre-installed themes as well.

Classic Games (Games)

Retrocomputing Enthusiast Repairs Mattel's 48-Year-Old Handheld Videogame (youtu.be) 26

Back in 1976, Mattel Electronics Auto Race became the very first handheld game to use only solid-state electronics, according to Wikipedia. (Its only mechanical elements were its on/off switch and hand-operated controls...) Nearly half a century goes by — until the ancient and broken gizmo reaches long-time Slashdot reader Shayde, who "dove into disassembling the unit and figuring out the problem."

Ironically, at one point his voltimeter stopped working, because...its batteries were dead. But a tri-wing screwdriver reveals the game's beautiful 1976 circuitboard — before the video fast forwards through "an almost comical attempt by me, a systems software engineer, to sauter the connections back onto this 48-year-old connector." (Instead he ends up replacing the machine's 9-volt battery connector...) On his Patreon page, he writes that filming the video "took a stupidly long time to put together." But their Slashdot submission acknowledges that in the end, "Taking it apart and debugging it was fun. (Slight spoiler: I figured out what was wrong, was an easy fix), and the game plays great now!"

Any Slashdot readers have memories of playing Mattel Electronics Auto Race? My one experience felt like that time that a gaming magazine had nine children (ages 9 to 12) try to play old 1970s-era videogames like Pong. ("Wow. The score is tied. It's so exhilarating..." "My line is so beating the heck out of your stupid line...")
Firefox

20 Years Ago Today: 'Firefox Browser Takes on Microsoft' (archive.org) 50

A 2002 Slashdot post informed the world that "Recently Blake Ross, a developer of the Phoenix web browser, has made a post on the Mozillazine forums looking for a new name for the project. Apparently the people over at Phoenix Technologies decided that the name interferes with their trademark since they make an 'internet access device'..."

And then, on November 9 of 2004, the BBC reported that "Microsoft's Internet Explorer has a serious rival in the long-awaited Firefox 1.0 web browser, which has just been released." Their headline? "Firefox Browser Takes on Microsoft." Fans of the software have banded together to raise cash to pay for an advert in the New York Times announcing that version 1.0 of the browser is available. ["Are you fed up with your browser? You're not alone...."] The release of Firefox 1.0 on 9 November might even cause a few heads to turn at Microsoft because the program is steadily winning people away from the software giant's Internet Explorer browser.

Firefox has been created by the Mozilla Foundation which was started by former browser maker Netscape back in 1998... Earlier incarnations, but which had the same core technology, were called Phoenix and Firebird. Since then the software has been gaining praise and converts, not least because of the large number of security problems that have come to light in Microsoft's Internet Explorer. Rivals to IE got a boost in late June when two US computer security organisations warned people to avoid the Microsoft program to avoid falling victim to a serious vulnerability.

Internet monitoring firm WebSideStory has charted the growing population of people using the Firefox browser and says it is responsible for slowly eroding the stranglehold of IE. Before July this year, according to WebSideStory, Internet Explorer was used by about 95% of web surfers. That figure had remained static for years. In July the IE using population dropped to 94.7% and by the end of October stood at 92.9%. The Mozilla Foundation claims that Firefox has been downloaded almost eight million times and has publicly said it would be happy to garner 10% of the Windows- using, net-browsing population.

Firefox is proving popular because, at the moment, it has far fewer security holes than Internet Explorer and has some innovations lacking in Microsoft's program. For instance, Firefox allows the pages of different websites to be arranged as tabs so users can switch easily between them. It blocks pop-ups, has a neat way of finding text on a page and lets you search through the pages you have browsed...

Firefox celebrated its 20th anniversary with a special video touting new and upcoming features like tab previews, marking up PDFs, and tab grouping.

And upgrading to the latest version of Firefox now displays this message on a "What's New" page. "Whether you just downloaded Firefox or have been with us since the beginning, you are a vital part of helping us make the internet a better place.

"We can't wait to show you what's coming next." ("Check out our special edition wallpapers — open a new tab and click the gear icon at the top right corner...")
Software

Europe's Largest Local Authority Slammed For 'Poorest' ERP Rollout Ever (theregister.com) 71

UK government-appointed commissioners have labeled Birmingham City Council's Oracle Fusion rollout as "the poorest ERP deployment" they have seen. From a report: A report published by the UK council's Corporate Finance Overview and Scrutiny Committee found that 18 months after Fusion went live, the largest public authority in Europe "had not tactically stabilized the system or formulated clear plans to resolve the system issues and recover the operation."

The city council's cloud-based Oracle tech replaced the SAP system that it began using in 1999, but the disastrous project encountered a string of landmark failures. The council has failed to produce auditable accounts since Oracle was implemented in 2022, costs have ballooned from around 19 million pound to a projected estimate of 131 million pound and, because the council chose not to use system audit features, it cannot tell if fraud has taken place on its multibillion-pound spending budget for an 18-month period. In September last year, the council became effectively bankrupt due to outstanding equal pay claims and the Oracle implementation.

The report from "best value commissioners" appointed by central government to investigate struggling councils said that following the Oracle implementation, "a serious lack of trust had developed between members and officers driven by the failed implementation and subsequent lack of progress to resolve the situation."

AI

Even Microsoft Notepad Is Getting AI Text Editing Now 78

Microsoft is introducing a feature to Notepad called Rewrite that will let you use AI to "rephrase sentences, adjust tone, and modify the length of your content." The Verge reports: If you're a Windows Insider with early access to the feature, you can try it by highlighting the text you want to adjust in Notepad, right-clicking it, and choosing Rewrite. Notepad will then display a dialogue box where you can decide how they want to change their text -- for example, if it needs to be longer or shorter. Rewrite will then offer three rewritten versions that you can replace your work with.

It's worth noting that you'll have to sign in to your Microsoft account to use Rewrite, as it's "powered by a cloud-based service that requires authentication and authorization." Microsoft is launching this feature in preview on Windows 11 in the US, France, UK, Canada, Italy, and Germany.
In July, Microsoft rolled out spellcheck and autocorrect for Notepad.
Software

'Just Have AI Build an App For That' (davidgomes.com) 75

Software engineer David Gomes writes in a blog post: I sometimes need to search for a website that will "convert a PNG to SVG", or "remove page from PDF" or "resize svg". And these apps are... okay. I don't really trust most of them with my data, and also a lot of times they just don't work or have too many ads. So, I've been noticing a trend of people just using AI agents to create full blown apps for these simple use cases.

I decided to try it myself for a "resize SVG" app since I recently had to go through a bunch of websites to do this. So, I pulled up Replit Agent and even though I've used it before, it doesn't cease to amaze me just how insanely good it is. The level of polish on this product is unlike any other AI agent out there right now. It starts off by drawing up a plan and asking you for feedback on that plan. Then, it'll just go to town and try to build the app. But what's super clever about it is that the agent asks you for feedback along the way. Effectively, the Replit Agent guides you, not the other way around (as one might have expected).

Google

Google's Big Sleep LLM Agent Discovers Exploitable Bug In SQLite (scworld.com) 36

spatwei writes: Google has used a large language model (LLM) agent called "Big Sleep" to discover a previously unknown, exploitable memory flaw in a widely used software for the first time, the company announced Friday.

The stack buffer underflow vulnerability in a development version of the popular open-source database engine SQLite was found through variant analysis by Big Sleep, which is a collaboration between Google Project Zero and Google DeepMind.

Big Sleep is an evolution of Project Zero's Naptime project, which is a framework announced in June that enables LLMs to autonomously perform basic vulnerability research. The framework provides LLMs with tools to test software for potential flaws in a human-like workflow, including a code browser, debugger, reporter tool and sandbox environment for running Python scripts and recording outputs.

The researchers provided the Gemini 1.5 Pro-driven AI agent with the starting point of a previous SQLIte vulnerability, providing context for Big Sleep to search for potential similar vulnerabilities in newer versions of the software. The agent was presented with recent commit messages and diff changes and asked to review the SQLite repository for unresolved issues.

Google's Big Sleep ultimately identified a flaw involving the function "seriesBestIndex" mishandling the use of the special sentinel value -1 in the iColumn field. Since this field would typically be non-negative, all code that interacts with this field must be designed to handle this unique case properly, which seriesBestIndex fails to do, leading to a stack buffer underflow.

AI

Meta Permits Its AI Models To Be Used For US Military Purposes (nytimes.com) 44

An anonymous reader quotes a report from the New York Times: Meta will allow U.S. government agencies and contractors working on national security to use its artificial intelligence models for military purposes, the company said on Monday, in a shift from its policy that prohibited the use of its technology for such efforts. Meta said that it would make its A.I. models, called Llama, available to federal agencies and that it was working with defense contractors such as Lockheed Martin and Booz Allen as well as defense-focused tech companies including Palantir and Anduril. The Llama models are "open source," which means the technology can be freely copied and distributed by other developers, companies and governments.

Meta's move is an exception to its "acceptable use policy," which forbade the use of the company's A.I. software for "military, warfare, nuclear industries," among other purposes. In a blog post on Monday, Nick Clegg, Meta's president of global affairs, said the company now backed "responsible and ethical uses" of the technology that supported the United States and "democratic values" in a global race for A.I. supremacy. "Meta wants to play its part to support the safety, security and economic prosperity of America -- and of its closest allies too," Mr. Clegg wrote. He added that "widespread adoption of American open source A.I. models serves both economic and security interests."
The company said it would also share its technology with members of the Five Eyes intelligence alliance: Canada, Britain, Australia and New Zealand in addition to the United States.
AI

Perplexity CEO Offers To Replace Striking NYT Staff With AI (techcrunch.com) 52

An anonymous reader quotes a report from TechCrunch: The CEO of AI search company Perplexity, Aravind Srinivas, has offered to cross picket lines and provide services to mitigate the effect of a strike by New York Times tech workers. The NYT Tech Guild announced its strike Monday, after setting November 4 as its deadline months earlier. The workers represented provide software support and data analysis for the Times, on the business side of the outlet. They have been asking for an annual 2.5% wage increase and to cement a current two days per week in-office expectation, among other things. [...] Picketers demonstrated in front of the NYT building in New York as negotiations continued. Meanwhile, on X, formerly known as Twitter, Perplexity's CEO offered to step in for the striking workers.

Replying to Semafor media editor Max Tani quoting the publisher, Srinivas wrote: "Hey AG Sulzberger @nytimes sorry to see this. Perplexity is on standby to help ensure your essential coverage is available to all through the election. DM me anytime here." Many on X immediately castigated Srinivas for acting as a scab -- a derogatory term for people willing to perform the jobs of striking workers. It is widely considered a disreputable behavior in matters of labor and equity. By undercutting collective action, scabs limit the ability of workers to bargain with those in positions of power. Srinivas may simply be trying to make sure people have the information they need on election day. The company has lately unveiled its own elections info hub and map. But to offer its services explicitly as a replacement for striking workers was bound to be an unpopular move.

Though TechCrunch asked Perplexity for comment, Srinivas responded to TechCrunch's post on X saying that "the offer was *not* to 'replace' journalists or engineers with AI but to provide technical infra support on a high-traffic day." The striking workers in question, however, are the ones who provide that service to the NYT. It's not really clear what services other than AI tools Perplexity could offer, or why they would not amount to replacing the workers in question.

The Courts

Lawsuit Accuses PowerSchool of Selling Student Data To 3rd Parties (businessinsider.com) 11

A former teacher has filed a federal lawsuit against PowerSchool, alleging the education technology giant illegally sells student data to third parties without proper consent. Emily Cherkin, lead plaintiff in the class action suit filed in San Francisco, claims PowerSchool has amassed 345 terabytes of data from 440 school districts, including sensitive information about students' health, behavior, and academic records. The company provides software services to more than 60 million students across 90 of the largest U.S. school districts.

The lawsuit alleges PowerSchool sells anonymized student data to over 100 partners, including educational consultants and government agencies, while marketing its analytics for workforce and policy planning. The company's Naviance college-planning software alone tracks 6 million high school students. PowerSchool has denied the allegations.
Nintendo

Newest Device To Run Doom: Nintendo's Alarm Clock 9

A hardware hacker has successfully modified Nintendo's $100 Alarmo device to run the classic video game Doom, marking another milestone in the gaming community's tradition of porting the 1993 shooter to unconventional devices.

YouTuber GaryOderNichts demonstrated the 2.8-inch circular alarm clock running Chocolate Doom natively, using the device's wheel for movement and side buttons for weapons. The hack requires no hardware modifications and works on the current 2.0 software version. The hack came after researchers discovered vulnerabilities in the Alarmo's STM32H7 microcontroller, enabling custom firmware installation through its USB-C port. The trick omits audio due to memory restrictions, GaryOderNichts notes, but it allows for custom animations and displays.
Security

Inside the Massive Crime Industry That's Hacking Billion-Dollar Companies (wired.com) 47

Cybercriminals have breached dozens of major companies including AT&T, Ticketmaster and Hot Topic by exploiting "infostealer" malware that harvests login credentials from infected computers, an investigation has found. The malware, spread through pirated software and social media, has infected 250,000 new devices daily, according to cybersecurity firm Recorded Future. Russian developers create the malware while contractors distribute it globally, deliberately avoiding former Soviet states. Hot Topic suffered potentially the largest retail hack ever in October when attackers accessed 350 million customer records using stolen developer credentials. Google and Microsoft are racing to patch vulnerabilities, but malware makers quickly adapt to new security measures.

Slashdot Top Deals