Infrastructure

Russian strikes also cut power to Ukrainian cities as Moscow claims 700 Ukrainian drones downed across multiple regions.

Ukrainian drone strikes have killed three people in Russia’s Belgorod region, while attacks cut power to multiple cities in Ukraine and parts of Russian-occupied Crimea, officials reported.

Local Russian authorities in Belgorod, which borders Ukraine, announced the three deaths on Wednesday. In Ukraine, President Volodymyr Zelenskyy said Russia’s overnight attacks damaged power generation facilities and substations in nine regions leaving emergency outages in many cities.

Russia’s Defence Ministry confirmed on Telegram that it hit two power stations in Ukraine’s Kyiv and Zhytomyr regions. Ukraine has repeatedly said Moscow is targeting its energy grid as temperatures drop before winter.

Overnight, Russian attacks on critical infrastructure caused hours-long power and water outages across Kyiv and surrounding regions.

Residents in the capital were urged to use public drinking water fountains, and emergency centres offering hot tea and power points to charge devices were set up in the worst-hit areas.

There were also power outages in Crimea, the peninsula Russia seized from Ukraine in 2014, home to approximately 2.5 million residents. Russia’s Ministry of Energy said Ukrainian strikes hit energy infrastructure overnight and that temporary outage schedules were in force. It did not say how many households were affected.

But reports also indicated that Russia-held Crimea ordered power cuts after an accident outside the region, a Moscow-installed ⁠official said, according to the Reuters news agency.

‌In addition to the capital, Kyiv, Russia also hit the regions of Poltava, Dnipro, Kirovohrad and Rivne, Reuters reported, citing Ukraine’s emergency service and local officials.

In southern Russia, a Ukrainian drone attack started a fire at a major warehouse belonging to Ozon, known as Russia’s Amazon. The strikes were on an Ozon distribution facility in the town of Adygeysk, in the Republic of Adygea, regional head Murat Kumpilov said.

Ozon said all workers were evacuated and no one was hurt, and that it had removed damaged goods from its listings and rerouted deliveries.

Russia’s Defence Ministry also said it downed 709 Ukrainian drones across 14 regions, Crimea and the Black and Azov seas.

Kremlin response to US midterms

Amid ongoing fighting between Russia and Ukraine, Russia’s Kremlin spokesman Dmitry Peskov said the Kremlin hopes United States President Donald Trump will continue his peace efforts after a sweeping Democratic victory in the congressional midterms dealt a blow to the president.

“President Trump continues to exercise his powers. We sincerely hope that he will also continue his peacemaking efforts,” Peskov said in a statement.

Whether a change in Congress could hinder Trump’s peace efforts, Peskov said, as cited by the state-run Interfax news outlet, that it was “an internal matter for America”.

Democratic control of the legislature in January is expected to bring a more vocal pro-Kyiv majority in Congress that could pressure Trump to change tack, but there is little hope that the US will return as a major financial backer of Ukraine.

Meanwhile, Ukraine’s Zelenskyy awarded US First Lady Melania Trump the Order of Princess Olga, which honours women who have contributed to Ukraine, according to a presidential decree on Wednesday.

The decree noted Melania Trump’s “significant personal contribution” in providing support for humanitarian aid and children in Ukraine.

Ukrainian officials say the US first lady played a pivotal role in organising a six-day local ceasefire to evacuate civilians from the Russian-occupied town of Oleshky, which ended on Sunday.

Attacks the latest to disrupt electricity supplies; army reports new defections from paramilitary RSF.

Drone strikes are reported to have hit three electricity substations in eastern and northern Sudan, the latest attacks in a concentrated campaign.

The attacks on Monday, which caused widespread power outages across parts of the country, brought the number of strikes reported to target Sudan’s electricity network to 18 over the past week.

Sudan’s military government has claimed that Ethiopia is aiding the paramilitary Rapid Support Forces (RSF) – which it has been fighting since April 2023 – in carrying out the attacks.

Facilities in New Halfa and Aroma in eastern Kassala state were hit early on Monday, while the al-Ghazali substation in Sudan’s Northern State was also targeted, according to local media.

Videos circulating on social media appeared to show fires at the facilities, with civil defence teams trying to extinguish the fires. Al Jazeera was not able to immediately verify the footage and reports.

On Sunday, Sudan’s government said it had filed complaints against Ethiopia with the United Nations Security Council and the African Union’s Peace and Security Council, accusing Addis Ababa of involvement in the ongoing campaign of attacks on civilian infrastructure and power stations.

The Sudanese army also reported on Monday that a group of RSF members had defected by surrendering to its forces in Damazin, the capital of southeastern Blue Nile state.

The announcement follows a declaration, in video footage obtained exclusively by Al Jazeera, by senior RSF commander Siddiq Ander that he had defected.

In a statement, the army said that the development was the latest in increasing defections from the paramilitary group in Blue Nile state.

It added that the group’s commander had provided information concerning the management of military operations in Damazin, including “Ethiopian support” for the RSF.

Hebron’s economic losses surpass $3.8m as Israeli forces demolish West Bank homes and close hundreds of businesses.

Israeli forces are maintaining their siege on Hebron for the 10th consecutive day, threatening to expand their offensive and forcing more Palestinian families from their homes.

The lockdown in the occupied West Bank city was enforced after an attack on October 23 near Hebron in which two Israeli soldiers were killed.

More than 3,300 Palestinians have since been displaced or affected, with homes destroyed and businesses shut, according to the local municipality.

Mayor Yousef al-Jabari told Al Jazeera on Saturday that daily economic losses were estimated to exceed 12 million shekels ($3.8m), with more than $1.9m worth of damage to infrastructure, along with losses in the health and environmental sectors estimated at about $160,000.

He said Israeli forces have demolished 15 homes and other structures and forced 327 businesses to close. About 80,000 students have been unable to attend school for 10 days, he added.

The mayor said Hebron accounts for about 40 percent of the Palestinian economy and the siege amounts to “collective punishment”.

Palestinian families in and around the city fear the army could soon extend its attacks.

Raids and settler attacks

Israeli arrests of Palestinians in Hebron and other cities in the occupied West Bank continued on Sunday.

Israeli forces arrested 10 Palestinian teachers in Masafer Yatta, south of Hebron and seized their vehicle, reported the Palestinian news agency Wafa.

Video shared by Palestinian media and verified by Al Jazeera showed the Israeli military raiding a school run by the United Nations in the Shufat refugee camp in occupied East Jerusalem.

The United Nations humanitarian office, OCHA, said Israeli settlers carried out 397 attacks on Palestinians across the occupied West Bank in October, the highest monthly figure since monitoring began in 2006, Wafa said.

Between October 20 and 26, settler attacks targeted 49 Palestinian communities, mostly while Palestinians harvested olives on their land.

Nine children were among 57 Palestinians injured by settlers and Israeli forces: 34 by military gunfire and physical assaults and 23 in settler attacks.

Since the start of 2015, Israeli authorities have issued 9,518 demolition or stop-work notices against Palestinian property in the occupied West Bank, reported the Colonization and Wall Resistance Commission. The Palestinian government commission added that 344 of those notices were given in the first nine months of this year.

Earlier this month, authorities worldwide urged website administrators to execute emergency updates after a nonprofit programming foundation flagged critical security flaws that could allow hackers to breach systems.

Government and corporate websites briefly went offline to patch the vulnerabilities, nicknamed PHP2Shell, which were discovered by independent cybersecurity experts using artificial intelligence (AI).

The vulnerabilities were embedded in the code of a widely used open-source web programming language, PHP, for more than a decade. They had gone unnoticed, however, because it would have been too complicated for humans to exploit them without the use of advanced AI.

But cybersecurity experts, as well as those maintaining important software, say PHP2Shell could be the first in a deluge of security flaws exposed by emerging AI. They say much of the world’s most critical digital infrastructure is maintained by volunteers, who often lack the resources and time to respond to newly discovered threats.

“There’s been a lot of people in the AI safety community that said this is one of the first areas where we are going to see the harmful impact of AI,” said Peter Slattery, a research scientist at MIT’s FutureTech, who studies how cybersecurity experts are dealing with the new technology and tracks real-world incidents involving AI.

A digital world built on volunteer work

PHP got its start in 1995, when Danish-Canadian programmer Rasmus Lerdorf sought to track how many people visited his online resume. Over time, others around the world improved Lerdorf’s software, and it grew in popularity.

As with other open-source coding projects, anyone could download, modify and share improvements. Websites like Facebook and Wikipedia were built using PHP, which runs about 70 percent of the world’s websites.

In 2021, a dedicated nonprofit, the PHP Foundation, was launched to coordinate development. Like many other foundations maintaining open-source software, it operates on a meagre budget.

Most of the digital infrastructure consumers use is powered by open source software. The Mozilla Firefox browser is open source, as are languages like Perl, Python, and JavaScript. The software that lets a computer communicate with others on the internet is often open source, with many servers using products like Apache HTTP Server, maintained by the Apache Software Foundation.

“The world today, including proprietary software vendors, relies on open source software for its digital infrastructure,” said Amanda Brock, CEO of OpenUK, a nonprofit that supports open source software.

The world’s largest corporations, like Meta, Google, OpenAI and Anthropic, depend on that volunteer-built, open-source infrastructure. Now, those companies’ own AI tools are uncovering security flaws in the infrastructure at a pace that needs far more resources for groups like the PHP Foundation to keep up.

“It’s simply not possible with the resources in place to fix all of the known vulnerabilities,” Brock said. “Foundations are attempting to manage these challenges, but the smaller ones don’t have hundreds of millions in funding, and managing this at the pace AI requires is proving impossible.”

A deluge of new bugs to fix

The PHP2Shell vulnerabilities were found through several advanced AI models, which can employ far more complicated attempts to hack past security barriers than humans could.

Developers of other software are also discovering far more security flaws than in the past because AI is being used to probe defences.

Google said it uncovered more than 1,000 security bugs in the last update for its Chrome browser, more than in the last two dozen updates combined. Mozilla, the foundation behind the Firefox browser, found more than 400 security vulnerabilities in April, a significant jump from the previous record of 76 bugs discovered just one month earlier.

“We have maybe 10 times more issues than usual because we are using AI to find them,” said Jarek Potiuk, part of the volunteer security team at the Apache Software Foundation. (In keeping with the foundation’s non-hierarchical ethos, Potiuk said he has no real title).

Potiuk said there is an “industry-wide movement” to conduct scans using AI models and identify security vulnerabilities, much like was done to find the bugs in PHP. But the scans themselves cost money – used to pay for the tokens for AI models – and afterwards, humans must pore over them to weed out false positives.

“Every project, every foundation is doing this right now – spending enormous amounts of time to find these issues,” Potiuk said. “AI helps to find them, but you have to verify things, you have to review them.”

Earlier this year, Anthropic launched Project Glasswing, offering $100m in credits to support its advanced Claude Mythos AI model to search for security vulnerabilities in the world’s critical software. In one month, more than 23,000 vulnerabilities were found across more than 1,000 open source projects.

The Apache Software Foundation has taken advantage of another scheme, the Alpha-Omega project, to scan for security bugs across the 290 software packages it maintains. The project, backed by companies like Anthropic, Amazon, Google, Microsoft and OpenAI, spends about $7m a year helping open-source developers find critical security bugs.

But those working on finding and fixing the security flaws say the corporate world could be doing a lot more, given the trillion-dollar valuation of companies whose products would not work without free software like the packages the Apache Foundation provides.

“They are helping a lot, but we need more active players in this area,” Potiuk said, “because it’s highly disproportional – the impact it has on the corporate world versus the open source world”.

When a major security flaw like PHP2Shell is uncovered, it often comes down to a handful of volunteers to fix it.

Keeping the internet’s infrastructure as decentralised and open-source as possible is crucial, Potiuk said. Instead of buying out something like PHP, major players like Google or Microsoft could, for instance, pay staff to dedicate some of their work hours to maintaining open-source projects they use.

Real-world targets

The 2021 Log4Shell vulnerability, which allowed hackers to remotely run code on millions of devices through a widely used library maintained by the Apache Software Foundation, underscored the critical role open-source software plays in system security. That bug was discovered without the use of AI.

Suddenly, cars, microwaves and a host of electronic devices connected to the internet were vulnerable, Potiuk said.

“That was the moment when the whole ecosystem realised how important it is to take care of open source,” he said.

A bug like that, if found by a malicious hacker and exploited before there is a chance to patch devices, could have caused a major disruption.

Slattery said the database of incidents he and his colleagues maintain shows that an increasing number of vulnerabilities are being detected, and it is a matter of time before some are exploited in the real world.

“We are starting to see both a lot more vulnerabilities detected and addressed in time, but also attacks on a wide range of systems,” Slattery said. “We have been moving in this direction for a long time. There are more and more things now you can attack.”

Four children drowned in bodies of water, while another man died in a car accident caused by the floods.

Heavy rains have been pouring over several Syrian provinces, leaving at least five people dead, including four children, in northern and eastern regions.

The four children all drowned in bodies of water across Raqqa and Deir Az Zor governorates, the Ministry of Emergency and Disaster Management said in a statement on Thursday.

A man also died when his car was caught in floodwaters near al-Salmani Bridge in the western Raqqa countryside.

Five others, including two children, remain missing in the storms that have drenched the country.

Bridge collapse

Thursday marked the second day the ministry recorded responses to flooding across the country. It continues to issue situation updates on its X account.

The ministry reported infrastructure damage and disruptions to several bridges in affected areas: Aleppo, Raqqa, Deir Az Zor, Hasakah and Homs.

State news agency SANA said al-Salmani Bridge, west of Tabqa, collapsed in the flooding, shutting the road linking Raqqa to Aleppo.

Emergency teams also reported rescuing 15 civilians whose vehicles were trapped by floodwaters. The ministry said it evacuated approximately 375 families from three camps on the rural outskirts of Raqqa.

This is not the first time the country has faced the threat of heavy rains and the flooding that follows.

UNICEF reported in June that 17,000 people had been adversely affected by flooding so far in the year. At the time, the UN agency said 700 families had been displaced, including around 2,000 children, and that 49 water treatment plants in Deir Az Zor and Raqqa governorates had also gone out of service.

The US tech giant is investing $15bn in a huge new data centre project in northern Finland.

Finnish police have launched a criminal investigation into suspected breaches of environmental law at the construction site of a planned Google data centre in northern Finland.

The project is part of a $15bn deal announced last month by Alphabet’s Google to invest in artificial intelligence (AI) infrastructure in Finland, which the US company described as its largest investment in Europe.

Authorities have said Tuike Finland, a local subsidiary of Google, conducted forest clearing and drainage at a planned site near the town of Muhos, before the environmental impact assessments required under Finnish law had been completed.

“We are investigating whether the company’s operations have breached the Water Act and resulted in environmental damage,” Detective Superintendent Kari Pakanen told the Reuters news agency on Thursday, adding that a guilty finding could lead to a corporate fine.

Pakanen declined to say whether any individuals could become a target of the investigation, and a Google spokesperson said the company would cooperate with the police investigation and continue to focus on maintaining compliance at its sites.

Tree felling prompts local anger

Videos and photographs showing the scale of the forest clearance at the site of the data centre, and Google’s initial reluctance to address the issue in the days after the news broke, have prompted widespread anger in Finland, where there is a high level of respect for the natural environment among the public.

“All the outrage and dismay directed at Google, I can very much share that, especially when we are talking about the parent company valued as the third-largest in the world,” Finnish Green MP Oras Tynkkynen told Al Jazeera. “There is just no excuse. You have to know the legislation of the country you are operating in; you can afford to hire the best legal experts to help you navigate the local legal requirements.”

Finnish authorities ordered Google to stop work at the data centre site at the start of October, and the latest information from the police highlights shortcomings in the drainage and water management at the site.

Tynkkynen called Google’s actions “unforgivable”, but cautioned that while the anger being directed at the US tech giant was justified, it was also diverting scrutiny away from legacy Finnish forestry companies, which he says are “by far the biggest contributors to biodiversity loss in this country”.

What is Finland’s appeal for data centre construction?

Finland’s cool climate, low-carbon electricity and government endorsement of AI projects have contributed to making the country one of Europe’s main destinations for data centre investments in recent years.

Finland, similar in size to Germany – but with one-seventh of the population, less than six million people – has had less vocal opposition to data centre buildouts than other places, including in the United States.

AI data centres are among the main drivers of a projected rise of up to 40 percent in Finland’s electricity consumption in the coming years, if all agreed grid connection projects go ahead, grid operator Fingrid has said.

Google’s planned investments in Finland include data centres, electricity grid improvements and clean energy and battery projects to power services such as Gemini, Search, Maps and YouTube.

Supporting Google’s plan, Finland’s Prime Minister Petteri Orpo said in September that the deal would be a boost for the economy, playing down concerns that it would suck up energy and push up power prices.

Two trains have crashed in central Spain, authorities said, with a local official saying some passengers were injured.

Spain’s rail system operator ADIF said that the incident occurred Wednesday morning in the province of Toledo.

The mayor of the nearby town of Urda, Manuel Galan, told Spanish state broadcaster TVE that passengers had been injured and that civil protection authorities had asked his town hall to prepare a sports pavilion to attend to passengers.

More to come…

Strikes hit a major bridge in the Ukrainian capital as leaders push for ‘direct discussions’ to end the war.

Russia has attacked transport infrastructure in Ukraine’s capital, targeting a major bridge, as the leaders of Finland and Norway held a rare call with Russian President Vladimir Putin and a separate one with Ukrainian President Volodymyr Zelenskyy.

Officials in Kyiv said the South Bridge was hit in overnight attacks on the city ⁠⁠that included 16 ballistic missiles and more ⁠⁠than 280 drones. Zelenskyy said Russian forces struck again while emergency crews were still dealing with the aftermath of the initial strikes.

“This is a serious escalation in Russia’s campaign targeting our logistics,” he said.

Russian attacks also caused deaths and injuries in the cities of Kharkiv and Pavlohrad.

Russia’s Defence Ministry said on Telegram that its forces had targeted transport infrastructure in Kyiv and a logistics hub in the Kharkiv region, along with industrial sites and cargo vessels it said were serving military purposes.

Officials in the Russian-controlled part of Ukraine’s southeastern Zaporizhzhia region said a drone strike on a bus killed one person and injured 30 others.

One person was also killed and six others were wounded in a drone attack on the Russian city of Bryansk, near the Ukrainian border.

The attacks come as the warring sides prepare for talks. On Friday, Kyiv and Moscow said they had agreed to hold United States-mediated technical meetings in Abu Dhabi in early November.

Finnish President Alexander Stubb and Norwegian Prime Minister Jonas Gahr Store called Putin from Helsinki on Tuesday to convey messages on future negotiations ahead of the Abu Dhabi meetings, according to a statement from both governments.

Zelenskyy, who spoke to the pair afterwards, said on X that they had told Putin real steps were needed to de-escalate attacks on Ukraine’s energy facilities and infrastructure. He said they also discussed preparations for the November talks.

“There must be peace, de-escalation is needed, and Russia must stop dragging out the war,” he said.

In the Finnish-Norwegian statement, Stubb said the war’s outcome would directly affect the security of Finland and Norway, both of which border Russia, and of Europe more widely.

“Ending the war requires direct discussions,” he said.

Store said the two leaders had stressed the importance of de-escalation during the call.

Both leaders said they spoke for their own countries, not Europe, and that Finnish and Norwegian support for Ukraine would continue.

Most Western European leaders have avoided direct contact with Putin since Russia’s full-scale invasion of Ukraine began in February 2022.

The calls come amid a renewed US push to end the war. The two governments described Tuesday’s call, held in consultation with Ukraine, as a follow-up to talks in Oslo on October 20 with Zelenskyy and US special envoy Steve Witkoff.

Witkoff met Putin in St Petersburg the next day, after which the Kremlin said it was ready to resume US-mediated talks with Kyiv that stalled in February.

US President Donald Trump has also credited his wife, First Lady Melania Trump, with securing a localised ceasefire in the southern Kherson region, which took effect on Tuesday to allow aid into the Russian-controlled town of Oleshky.

Fuel theft cited in Baniyas-Homs leak as gas export line in Hasakah catches fire.

Two pipelines carrying gas and oil products were damaged in separate incidents in Syria, state media reported, the latest disruptions to the country’s energy infrastructure following a series of suspected sabotage attacks.

The state-owned Syrian Petroleum Company announced the damage on Thursday, according to the Syrian Arab News Agency (SANA). The incidents add to a number of attacks on Syria’s oil and gas network in recent months, as the government tries to revive its energy sector.

An explosion struck the Jbessa gas pipeline in southern Hasakah province in the late afternoon, hours after damage to a pipeline transporting oil products from the coastal city of Baniyas to Homs caused a fuel leak.

The company said the gas pipeline had been targeted in a “sabotage attack”, according to SANA.

Neither SANA nor the company named a suspect or group responsible for the attacks.

Repairs under way

Oday al-Satouf, head of the company’s media office, told SANA that a hole was found in the Baniyas-Homs pipeline in the Hadida area, west of Homs. Crews isolated the affected stretch and secured the surrounding area, he said, closing valves on either side of the damaged section. Repairs have begun, while other teams monitor the area for safety. State media said the leak was believed to be linked to an attempted fuel theft.

Al-Satouf said gas would continue to reach power stations through alternative arrangements, and that domestic gas supplies were unaffected, according to SANA.

A string of incidents

More than a week ago, the company said an oil pipeline near Tal Hamis in the northeastern province of Hasakah was damaged in a sabotage attack. It added that authorities had arrested those responsible.

In late September, a fire broke out on a gas pipeline between al-Shoula and Deir Az Zor in the east, halting gas flows from the Jbessa plant to power stations, SANA reported. Hisham al-Saleh, a gas sector official at the company, said gas pressure in the area fell as crews worked to extinguish the blaze.

Syria has been working to restore its energy infrastructure and increase domestic oil production. That includes resuming operations at oil fields in Hasakah to supply refineries in Homs and Baniyas. In January, the petroleum company announced plans to transport crude from recently recovered fields to the two refineries as part of efforts to revive the sector.

The long-delayed bridge will formally open on Thursday, according to China’s state-run Xinhua news agency.

China and North Korea will officially open the New Yalu River Bridge to traffic on Thursday, China’s state-run Xinhua news agency reports.

China completed its side of the bridge in 2014, hoping to boost trade ties. However, North Korea left its side unfinished for years as relations soured after Beijing supported United Nations sanctions over Pyongyang’s nuclear tests.

The first bridge connecting Russia and North Korea also opened earlier this month.

China-North Korea Relations  

China’s exports to North Korea rose to a six-year high of $2.3bn last year, a 25 percent increase from the previous year. Chinese President Xi Jinping was welcomed in Pyongyang in June for the first time since 2019.

Since 2018, Beijing has tried to repair ties with Pyongyang, which also briefly began improving relations with Washington around the same time.

The China-North Korea relationship was forged during the Korean War. In 1961, the two countries signed the Treaty of Friendship, Cooperation and Mutual Assistance, which remains China’s only formal military alliance.

The treaty contains a mutual defence clause committing either side to assist the other if one comes under armed attack.

Although China was North Korea’s main diplomatic partner and protector for decades, relations strained after Beijing in 2017 supported tightening sanctions on Pyongyang for its nuclear weapons programme.

Analysts say North Korea’s recent growing relationship with Russia may have changed the balance of Pyongyang’s diplomatic dependence, reducing its reliance on Beijing.

North Korea and Russia signed a comprehensive strategic partnership treaty in 2024, including a mutual defence provision. Military and political ties between the two countries have grown considerably stronger, with North Korea deploying thousands of troops to fight in Russia’s war on Ukraine.

United States President Donald Trump also signalled an interest in repairing relations with Pyongyang last month, after his talks with North Korean leader Kim Jong Un abruptly ended in 2019. In his second term, Trump has floated meeting Kim again, though no official meeting has been set.

North Korea has not yet resumed issuing tourism visas to Chinese citizens, who once made up the bulk of its overseas visitors.

While North Korea’s trade with Russia largely involves military supplies, exchanges with China could arguably involve goods North Korea needs to develop its civilian economy, analysts have said.

Hundreds of French supermarkets have suffered unprecedented cyberattacks resulting in tonnes of food perishing and raising fears about the vulnerabilities of food systems to advanced technology.

The attacks, which appeared to target internet-linked refrigeration systems manufactured by a Danish company, raised the temperature of fridges and freezers to as high as 50 degrees Celsius (122F) at more than 500 shops and supermarkets across the country. Supermarkets confirmed the attacks on Monday.

France’s cybersecurity agency has advised companies operating affected freezer models to immediately disconnect them from the internet – or restrict access to them – and to perform software updates.

It is unclear who may have been behind the attacks, but authorities say they have now launched an investigation.

Here’s what we know:

What happened?

Hackers gained internet access to the refrigeration systems and remotely cranked up temperatures in freezers and fridges to 50C during the night when shops were closed. Millions of euros worth of food was spoiled, according to retailers. In some cases, the raised temperatures sparked fires or melted equipment.

French supermarket groups E-Leclerc, Intermarche, Carrefour, Monoprix and Cooperative U were all hit.

At least 300 of Intermarche’s stores and its Netto brand were affected. Cooperative U said more than 100 of its supermarkets were targeted, while Carrefour said 80 supermarkets were affected and Monoprix reported that about 5 percent of its roughly 490 stores were hit.

Officials are still investigating who launched the attack and how it was carried out. French TV channel BFM reported that the attackers appeared to have remotely triggered a forced defrosting option in the refrigeration systems.

The systems targeted are built by Danish manufacturer Danfoss, according to France’s government cybersecurity agency. The refrigeration models attacked included the AK-SM800 and AK-SC355.

Danfoss told the AFP news agency that most of the affected control systems were “legacy” products that had “outdated firmware”. The company said it had previously advised supermarkets to update them.

AFP also reported that officials are liaising with other European countries which may have been affected.

It is unclear exactly how much food has been lost. The attacks come after President Emmanuel Macron ordered last month that the country’s critical infrastructure be protected from Russian “hybrid attacks”.

Have supermarkets been hit by cyberattacks before?

Yes. Attacks like these have been reported in other parts of Europe and in the United States.

In April 2025, British retailer and supermarket chain Marks and Spencer suffered a sophisticated ransomware attack that the company said cost it approximately 300 million pounds ($397m) after it was forced to suspend online and app orders. The attack was orchestrated by a hacker group called Scattered Spider, using ransomware from DragonForce, another criminal group. Ransomware attacks involve using malicious software to hide essential data unless a ransom is paid.

According to UK media, the same hackers also tried to attack Co-op and the iconic Knightsbridge store, Harrods.

Similar reports have also emerged from the US. In June 2025, United Natural Foods, a frozen food company which supplies big supermarket brands such as Whole Foods, said it had discovered a cyberattack that forced it to take its systems offline. The company did not reveal the nature of the attack.

In November last year, Ahold Delhaize USA said it was the victim of a cyberattack that disrupted operations at more than 2,000 stores, including Hannaford, Food Lion and Stop and Shop.

Why target supermarkets?

They are an easy target and the consequences can be widespread.

As food and agricultural systems increasingly digitise, analysts say supermarkets selling perishable foods are increasingly vulnerable to attacks due to the nature of their stocks.

The rising sophistication of cyberattacks now means that common people and local, third-party companies relying on big chains for business are also falling victim as attacks disrupt supply chains, experts say.

Speaking to Al Jazeera, tech and cybersecurity analyst Steven Lachance said smart appliances connected to the internet will always be vulnerable as hackers seize on security lapses to log in to the systems remotely and trigger malicious features.

“It’s the new reality of having these connected equipment,” Lachance said, pointing out that attacks could evolve to target medical or energy systems.

“This should come as a global wake-up call … Throughout society, we have connected infrastructure that is live on the internet, and that can be hacked. It’s a new reality, and we absolutely need national and international measures to prevent those attacks; otherwise, it’s just going to keep happening,” he warned.

Rescue operation underway after flash floods swept away home, bridges and parts of the Manaslu trekking trail.

More than 100 foreign trekkers have been stranded in central Nepal, according to a local official, a day after flash floods in the Gorkha district washed away bridges, hiking trails and hundreds of homes.

Bhuwan Raj Ojha, an official of the Manaslu Conservation Area Project, told the Reuters news agency on Monday that the trekkers were stranded in different areas of the popular Manaslu trekking trail because part of the route had been swept away.

“Those hikers who want to return because of the flood need to be rescued. Those who ⁠want to continue their trekking can do so from locations that are safe,” he told Reuters from Gorkha.

“There are ⁠restaurants and tea houses along the route. They are ⁠safe”.

The flash floods hit on Sunday, when a predawn landslide blocked the Budhi Gandaki River in the Gorkha district, about 100km (62 miles) west of the Nepalese capital, Kathmandu.

Authorities ⁠rescued 321 people, including 12 foreigners, on Monday, and the army said the rescue operation would continue on Tuesday, even as the water level in the river receded.

The river is a tributary of the Trishuli River, downstream from another tributary where a ‌glacier collapse caused a catastrophic flood in August that killed 1,457 people, with thousands still missing.

There were no reports of deaths in the latest flood, but five villagers were out of contact after black muddy sludge and debris washed away more than 200 homes and damaged infrastructure, including three hydroelectric plants, national disaster authorities said.

Md Shahadat Hossain, a Bangladeshi trekker stranded in Jagat village, told the Anadolu news agency that nine Bangladeshis were waiting for a possible evacuation by helicopter.

“We have been stranded in Jagat since yesterday. A flash flood came down from above the village and flowed through its lower part,” he said.

“We are safe, but there has been no electricity since yesterday, communication with the outside world has been disrupted, and food supplies are gradually running short,” he added.

Gorkha district authorities have asked villagers living along the riverbanks downstream to evacuate.

National disaster authorities had also alerted people living along the river in the Gorkha, Tanahun, Chitwan, East Nawalparasi and West Nawalparasi districts about the flood.

Ukraine says it has received proposals from India, Turkiye, Egypt and the United States to broker talks with Russia. The offers come as the two adversaries escalate attacks on each other’s energy and port infrastructure with their war now in its fifth year.

Ukrainian Foreign Minister Andrii Sybiha revealed the four proposals at a briefing in Kyiv on Friday and singled out New Delhi’s. “The most comprehensive is India’s proposal,” he said, adding that India had signalled a willingness to play a role for the first time.

None of the proposals aims to end the war. Each seeks a narrower truce, covering energy facilities, ports or commercial shipping in the Black Sea.

Here’s what we know:

What is India proposing?

India has not made its plan public. Quoting unnamed sources, however, Indian media have reported it has three parts. According to the Hindustan Times, it would aim to protect infrastructure, keep grain and energy supplies moving through Black Sea ports, and ensure the safety of commercial shipping.

The first part – mutually halting strikes on energy facilities and ports – matches what Kyiv has been demanding. Sybiha said any deal must be a complete energy truce that covers port infrastructure as well.

The second part builds on the Black Sea Grain Initiative, which Turkiye and the United Nations mediated in 2022 but Russia abandoned in 2023.

The third part, protecting merchant ships and their crews, is particularly important to India because Indian sailors have been killed or harmed on Black Sea routes.

The sources were quoted as saying India’s plan goes further than the other three proposals because it covers infrastructure and shipping together. A Ukrainian official told the Kyiv Independent that it incorporates elements of the Turkish, Egyptian and US initiatives. The Kyiv Post reported that Sybiha also described the plan as addressing a possible ceasefire along the front lines, although other accounts said he gave no specifics.

The proposal likely took shape during Indian External Affairs Minister Subrahmanyam Jaishankar’s first visit to Ukraine last month and in a later meeting with Sybiha at the UN General Assembly in New York, also in September. Jaishankar said New Delhi was “trying to be helpful, starting with the Black Sea safety of shipping issue”.

What do we know about the Turkish and Egyptian proposals?

Very little. Neither Ankara nor Cairo has published details. Both reportedly focus on keeping Black Sea grain supplies moving by suspending attacks on commercial shipping. Some reports said the two countries proposed a grain truce jointly while others described two separate plans.

Turkiye has done this before. With the UN, it steered the 2022 grain deal, one of the few narrow truces of the war to hold for any length of time. Ankara and the UN are now organising new Black Sea talks with a round planned for October.

Beyond its Black Sea focus, almost nothing is known about Egypt’s proposal. Its interest, however, is clear: Egypt relies on Ukraine for nearly one-third of its grain supplies.

What is the US pitching?

According to Ukrainian President Volodymyr Zelenskyy, Washington has proposed three steps: a mutual halt to energy strikes, a reopening of the grain corridor and a trilateral meeting with Ukraine and Russia, possibly in Abu Dhabi.

The latest effort began in early September when US President Donald Trump’s envoys visited Kyiv and Moscow and secured an agreement in principle for a trilateral meeting. Steve Witkoff and Jared Kushner met Russian President Vladimir Putin in Moscow on September 5 while Kremlin envoy Kirill Dmitriev visited the US twice in September.

The trilateral meeting has since been pushed back. It had been expected to take place in the United Arab Emirates in early October. Washington now wants it in late October, and people close to the talks blamed the delay on Russia.

Washington has also invited Putin to the Group of 20 summit in Miami, Florida, in December. “We hope that’s an invitation he’ll accept,” US Secretary of State Marco Rubio said. The Kremlin said no decision has been made.

At the same time, the US is applying pressure to try to end the war. Trump recently signed a law giving him sweeping powers to sanction buyers of Russian energy.

He has also called on Ukraine to stop targeting Russian diesel facilities amid a diesel prices crisis in the US, where Trump faces tricky midterm elections next month. “Mr Zelenskyy has to do one thing,” he said on September 13. “He has to stop knocking out diesel fuel in Russia.” This drew much criticism that Trump instead should focus his comments on Russia, which began the war with its invasion of Ukraine in February 2022.

He is reportedly sceptical about his own government’s latest diplomatic initiative. People familiar with his thinking have told US media that he doubted Putin would agree to an energy truce before winter.

How have Russia and Ukraine responded?

Sybiha said Ukraine would agree to a truce but with conditions. It would accept an energy and Black Sea shipping ceasefire, but only as a combined package, he said.

He added that Kyiv is also open to an unconditional ceasefire along the current front lines. Zelenskyy backs the US-proposed meeting but stressed it needs “not only Ukraine but also the Russian side” to support it.

Moscow has been warm in tone but has committed to nothing. Kremlin spokesperson Dmitry Peskov said Russia would welcome India’s peace efforts while Putin said Modi has “very good ideas aimed at finding mutually acceptable solutions”, but he did not elaborate.

In private, Moscow appears to have said no. A Ukrainian official told the Kyiv Independent that Russia has rejected India’s proposal although this has not been confirmed publicly. Ukraine’s agriculture minister said Russia had rejected every Black Sea ceasefire option the mediators have presented.

Why are Global South countries becoming more involved?

Food supplies, the lives of their citizens and fuel prices are all at stake.

“I think it’s clear to many countries that this war is not a localised war, but it’s a war that has these global consequences,” Fredrik Wesslau, a senior policy fellow at the European Council on Foreign Relations, told Al Jazeera.

Russia and Ukraine account for more than a quarter of global wheat shipments, and their attacks on each other’s ports helped push wheat futures to a three-year high in August.

Sailors from countries with no links to the war are being killed. At least five Indian seafarers have died in strikes on Black Sea shipping in recent months along with seven Azerbaijani crew members since June. On Saturday, a Russian strike on a Liberian-flagged ship in a port in the Odesa region killed a crew member. Ukraine, for its part, has targeted tankers it links to Russia’s shadow fleet since July.

The energy war is also being felt in global markets. Ukraine reported more than 194 drone attacks on Russian refineries this year, hitting all 11 of the largest. Bloomberg News estimated that Russia’s fuel output has fallen by more than 30 percent. With Middle East supply already down as a result of the US-Israel war on Iran, global diesel markets are more exposed to the loss of Russian supplies.

Maximilian Hess, a nonresident senior fellow in the Eurasia Program at the Foreign Policy Research Institute, said energy is at least as important as grain in driving the diplomatic efforts. He pointed to a “clear frustration” among many countries over high oil prices, which reflect both the Russia-Ukraine war and the crisis in the Middle East.

“Of course, Ukrainian grain is important for them, but the oil-price factor is important there as well,” he told Al Jazeera. “I think it is those commodity-shock concerns that are pushing them to re-embrace this rhetoric, rather than anything else.”

What are the challenges ahead?

Every previous attempt at diplomacy has failed to end the Russia-Ukraine war. A US-brokered, 30-day energy truce in early 2025 collapsed amid accusations of violations on both sides. At talks in Istanbul in May 2025, Zelenskyy complained that Russia had sent a junior delegation with no authority to sign a ceasefire.

In August 2025, a meeting between Trump and Putin in Alaska yielded no results despite Trump claiming to be close to a deal ahead of it.

Wesslau said Washington’s efforts have faltered partly because Trump – who had boasted he would end the war within 24 hours of taking office in January 2025 – has appeared unwilling to put real pressure on Moscow. “The Russians see this, and they conclude that they can continue this war,” he said.

Deep distrust remains. Oleksandr Merezhko, head of the Ukrainian parliament’s foreign affairs committee, said: “Putin never keeps agreements.”

Moscow’s actions on the ground suggest it is in no hurry, Wesslau said  “They’re trying to strangle Ukraine, strangle the economy, and make it unliveable ahead of the winter,” he said. He added that Moscow’s occasionally softer rhetoric was aimed mainly at the Trump administration and “has always proved to be a bluff”.

Russia’s terms are another obstacle. Hess said Moscow’s demands have not softened at any point since it launched the war and at times have grown. Putin has demanded all of Ukraine’s Donetsk, Luhansk, Kherson and Zaporizhia regions, including territory Russian forces have never controlled, as well as a buffer zone in northern Ukraine. Moscow is also seeking sanctions relief and military concessions for any Black Sea deal.

“I don’t think it’s a question of who actually mediates. I think it’s really a question of the calculation in Moscow,” Wesslau said. “Fundamentally, the problem is that Putin doesn’t want a ceasefire or a peace agreement. He wants to continue the war. He believes that he can win.”

Analysts said only greater economic pressure is likely to change that calculation.

Wesslau said if Europe can close down Russia’s shadow fleet of oil tankers, “this would be a massive blow to Russia’s war economy.” Hess said the country best placed to shift things quickly is China, rather than the US, by cutting its purchases of Russian oil. However, he added: “I don’t think Beijing is interested in doing so.”

Hess said that unless there is an outside shock, the war “is much more likely to last another four years than another four months”.