The United States Navy has been hard at work replacing its aging Los Angeles-class and Ohio-class nuclear submarines with the newer and more advanced Virginia-class fast attack submarines, of which 25 have been constructed as of this writing. The latest boat to come out of the shipyards and enter the inventory is the USS Massachusetts (SSN-709), which is the eighth U.S. vessel named after the state. On the surface, pun definitely intended, the USS Massachusetts is like its preceding 24 Virginia-class submarines, but on August 17, 2026, it skipped a pivotal step in the process from construction to service.
After completing shakedown trials, the Navy determined that it was ready to proceed with fleet tasking, meaning that it could begin serving immediately. What’s interesting about this is the fact that the Massachusetts will not have to undergo its post-shakedown availability (PSA), thanks to its combat readiness and the boat’s superb construction. This move is a calculated risk, but as far as the Navy is concerned, the Massachusetts’ shakedown proved it was ready to join the fight.
Chief of Naval Operations Adm. Daryl Caudle explained that the “USS Massachusetts is ready to fight, and that is exactly where we need her, in the hands of our Sailors and available to the Fleet. Waiving this availability reflects the exceptional condition of the ship and our determination to deliver combat-ready capability faster.” The Massachusetts’ delivery to the Navy is surprising, as SlashGear previously reported about its then-forthcoming shakedown period that is no longer happening. Regardless, the Massachusetts is now expected to begin fleet operations as soon as possible.
The process to build, commission, undergo sea trials, and perform a PSA is a tried-and-true method the Navy has employed since World War II. Because of this, it’s unusual to skip any of those steps, especially the PSA prior to passing the new vessel into the fleet. When a new sub finishes its sea trials, and before it’s ready for combat operations, the PSA is designed to address any maintenance or performance issues that arise.
Because the USS Massachusetts didn’t reveal any problems, it skipped the step. That’s significant, as it can take a year or more to move through the PSA in drydock to service entry. Because the USS Massachusetts skipped that step, it indicates that the boat is ready, but it’s also concerning, as it suggests that the Navy is rushing the sub through the customary process. All new U.S. Navy vessels undergo their PSA, which often requires a great deal of maintenance in a shipyard.
Any design flaws or issues are taken care of during the PSA, and while the Navy allowed the Massachusetts to skip it, it’s unlikely that no problems arose. Still, if there were concerns, they were likely minor and could be addressed during normal submarine operations. No other Virginia-class submarines skipped their PSAs, so the Navy’s decision has raised eyebrows. There are benefits beyond receiving the sub early, as freeing it from its PSA also frees up shipbuilding and maintenance facilities and personnel who can work on other vessels instead, so there are several positives resulting from this decision.
Now that the USS Massachusetts is ready to join the fleet, it brings a great deal of undersea capability to the Navy’s submarine force. The U.S. Navy’s submarine fleet is big, and it includes several different types of boats. As the 25th Virginia-class submarine and the 7th built under the Block IV program, the Massachusetts is one of the most advanced and potentially lethal subs in the world. The Virginia-class program is expected to produce 45 total boats for the U.S. Navy, though three were sold to the Royal Australian Navy with an option to purchase additional subs in the future.
The Massachusetts is an impressive vessel that displaces 7,800 tons of seawater, stretches 377 feet in length, and can reach speeds of up to 29 mph. It will be crewed by 120 enlisted submariners and 15 officers. Thanks to its nuclear reactor and auxiliary diesel engine, the Massachusetts has an unlimited range and will not require refueling. Previous nuclear-powered submarines underwent mid-life refueling at 15 years, extending a boat’s service life to 30 years after modernization upgrades and enhancements.
The Virginia-class was built specifically to eliminate this need, and it’s expected to retire after 33 years. As a Block IV vessel, the Massachusetts utilizes the Virginia Payload Tube (VPT), a revolver-type vertical launcher system, of which it has two, whereas earlier blocks used 12 vertical launch systems. Each VPT can house and fire six Tomahawk cruise missiles. The boat is also outfitted with four torpedo tubes, enhanced acoustics and stealth capabilities, and advanced combat systems that make the USS Massachusetts an impressive boat.
Google’s Pixel 11 Pro Fold has once again struggled in a durability test, with the foldable cracking along both antenna lines during a bend test. It’s the fourth consecutive generation of Google’s foldable phone to break at the same vulnerable area.
The latest test comes from Zack Nelson of the YouTube channel JerryRigEverything, who put the Pixel 11 Pro Fold through his usual series of scratch, flame, dust and bend tests. The biggest concern came at the end, when the phone cracked along the antenna lines positioned next to the hinge.
That is the same area where the original Pixel Fold, Pixel 9 Pro Fold and Pixel 10 Pro Fold failed during similar testing. Google has previously claimed that it re-engineered the Pixel 11 Pro Fold to be three times stronger, with its hinge tested to withstand 83 million opening and closing cycles in a laboratory environment. The durability test suggests there may still be a weak point outside those controlled conditions.
The exterior 6.6-inch display also showed scratches at level six on the Mohs hardness scale, with deeper grooves at level seven, despite Google claiming it is twice as scratch-resistant as last year’s model. The larger 8-inch Super Actua Flex Display, meanwhile, scratched at level two, with deeper marks at around the level of a fingernail, which is expected for a flexible display.
The flame test caused permanent damage to both screens. The exterior display lasted around 20 seconds under the flame before suffering permanent damage, while the inner display lasted about 13 seconds.
Zack also found that fine particles could make their way into the hinge despite the phone’s IP68 rating. Water resistance and dust resistance aren’t necessarily the same thing when a device has moving parts, and the test showed dust collecting around the hinge and internal components.
The most dramatic moment came during the bend test. The phone cracked along both antenna lines, but the front glass also popped completely away from the frame. Zack noted that the glass came off without wires or other components remaining attached to it.
The test also offered a look inside the phone, including its flexible display construction and hinge. Under the inner screen is an ultra-thin glass layer and reinforcement structure, while the hinge uses a different design from Samsung’s Galaxy Z Fold 8. The Pixel 11 Pro Fold also has an internal cooling system with a copper vapor chamber for its Tensor G6 chipset.
As with any durability test, this doesn’t mean the Pixel 11 Pro Fold will fail during normal use. However, seeing the same antenna-line failure for a fourth consecutive generation raises questions about Google’s decision to retain the placement of a known structural weak point.
The U.S. Department of Justice announced a $400 million settlement with TikTok, ByteDance, and affiliated companies over allegations that they violated the Children’s Online Privacy Protection Act (COPPA).
The TikTok social media platform, owned by the Chinese technology company ByteDance, allows users to create, watch, and share short-form videos.
In 2024, the U.S. Department of Justice filed a lawsuit against TikTok and its parent company, alleging violations of COPPA dating back to 2019.
In 2019, Musical.ly, TikTok’s predecessor, agreed to a $5.7 million settlement with the Federal Trade Commission (FTC) over allegations of illegally collecting personal data from users under 13 without parental consent.
Last year, the FTC referred a new investigation to the DoJ, claiming that TikTok continued to breach COPPA rules despite its 2019 commitment to comply with the rules.
As a result of the investigation, the DoJ alleged that TikTok knowingly allowed children under 13 to create regular accounts outside its restricted “Kids Mode,” collected and retained their personal information without parental consent, failed to delete accounts and data when parents requested it, and maintained inadequate procedures for finding and removing underage accounts.
The newly announced agreement resolves the litigation, with the DoJ now recognizing that TikTok has made significant changes to its ownership, data management, and legal compliance operations since 2024.
The U.S. state also recognized that TikTok implemented important changes to its privacy retention practices, improved age-related controls, and strengthened parental oversight.
As part of the settlement agreement, one of the largest ever for COPPA cases, TikTok will now pay $300 million immediately, and another $100 million if a court vacates an earlier consent decree involving its predecessor, Musical.ly.
“Companies that collect children’s personal information must comply with the law,” stated Assistant Attorney General Brett A. Shumate.
“This resolution secures a significant monetary recovery and reflects the Department’s commitment to ensuring children receive the full protections that Congress mandated.”
The announcement notes that the settlement resolves only allegations, and there has been no judicial determination that TikTok or ByteDance is liable.
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
According to strings accidentally left in a macOS Tahoe update, Apple’s Home Hub will offer user profiles, with identity verification provided by ambient sensing and built-in cameras.
With the macOS 26.7 release candidate build, Apple inadvertently revealed details about several of its upcoming products, including a camera-equipped model of AirPods. Also present was code related to the company’s upcoming Home Hub, an AI-focused device with an operating system that’s said to resemble tvOS.
Rumors have suggested the product will ship in two variants, one with a speaker-type base, and another wall-mounted version. This two-model approach was corroborated by macOS Tahoe code, and now even more details about the Home Hub have surfaced.
As noted by MacRumors, the macOS 26.7 RC build indicates Apple’s Home Hub will offer a Personal Content feature, meaning the device will display different content depending on who’s using it. This will seemingly be facilitated through user accounts or profiles.
Home Hub users will see the option to enable Personal Content after opening the Settings app and tapping their name. Once the feature is active, users will be able to access Personal Content by selecting their profile or account from the Home Hub’s Control Center.
Strings found in macOS Tahoe code reveal Apple’s Home Hub will feature cameras and “ambient sensing” for user recognition. “Sorry, since this device hasn’t seen you in a while, you’ll need to ask again in front of the camera,” reads one string. Another one asks the user to “come in front of this device and ask again.”
Aside from the new Personal Context feature, the macOS 26.7 RC also contains references to “Pebble,” which is believed to be the codename for Apple’s upcoming homeOS. The Home Hub operating system will seemingly feature “Faces” and a “Face Gallery,” which could be similar to what’s already avaialble on watchOS.
Also present are identifiers for both Home Hub variants, with J490 being the one with a speaker base, and J491 being the wall-mounted model. The descriptors “HomeAccessory” and “HomeAccessory_wall” appear to refer to these Home Hub variants as well.
Overall, while it looks as though the Home Hub will offer personalization options, the product’s software seemingly won’t be much of a departure from tvOS or watchOS.
President Donald Trump bought as much as $50,000 worth of SpaceX shares on June 23, according to a financial disclosure first reported by Reuters, two weeks after the record-setting IPO of Elon Musk’s company.
It’s not clear what price Trump paid for the shares, but by that point they had fallen from their highs of over $200. SpaceX shares were trading in the mid-$150 range on June 23. At the end of trading on Monday, shares closed at the IPO price of $135, possibly putting the president’s stake underwater.
Trump and Musk are close, despite a brief falling out last summer that involved the businessman accusing the president of withholding the Department of Justice’s files on Jeffrey Epstein because of how often Trump’s name appears in them. SpaceX has been hoovering up an increasing amount of government contracts and benefiting from the Trump administration’s deregulatory stance, according to a recent Wall Street Journal analysis.
White House spokesman Davis Ingle told Reuters that the president’s stock portfolio is managed by third-party financial institutions and replicate “recognized indexes, such as the Schwab 1000.” SpaceX lobbied popular indexes to change their rules to allow for faster inclusion ahead of its IPO, which means many people likely own some of the company’s stock even if they don’t know it.
Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators.
The miniOrange SAML SSO plugin turns a WordPress site into a SAML service provider, letting users log in through corporate identity platforms such as Microsoft Entra ID, Okta, Google Workspace, or OneLogin instead of separate WordPress credentials.
Created by Xecurify, miniOrange is a family of seven plugins, with a free version that has 10,000 downloads and 30,000 customers for the other six.
The two vulnerabilities observed in exploitation attempts are tracked as CVE-2026-61979 and CVE-2026-15981 and can be chained together to bypass authentication.
Because the miniOrange SAML SSO plugin accepts the signature algorithm from incoming SAML responses instead of enforcing the configured one, an attacker can leverage CVE-2026-61979 to select HMAC-SHA1. This causes the plugin to treat the RSA public key from the identity provider (IdP) as the shared secret.
Since the public key is known, the attacker can forge a signature that the plugin accepts as authentic.
The second security issue, CVE-2026-15981, causes the plugin to treat an OpenSSL verification error (-1) as a successful result, allowing malformed signatures to pass validation.
According to security firm Patchstack, the two vulnerabilities were publicly disclosed and fixed in July. However, the vendor’s advisory covered only the free edition, leaving the six paid editions without an alert, even though fixes were provided for those too.
The following versions addressed the two flaws:
Failing to disclose the risk across all versions of the plugin reportedly led many sites running the paid editions to take no action, creating an opportunity for threat actors to exploit the two vulnerabilities.
Patchstack reports that, on August 16, DigitalOcean blocked an anomalous WordPress administrator session originating outside its trusted network.
The investigation showed that attackers have chained the two flaws to obtain an admin session cookie through the Standard edition plugin in version 16.1.9.
Patchstack’s data shows that exploitation attempts and opportunistic scanning are underway, launched from six IP addresses across Europe, Africa, and the United States.
A proof-of-concept (PoC) exploit targeting the free edition is also publicly available, so the pace of attacks could increase at any time.
Patchstack warns that the WordPress administrator dashboard will not show update warnings for the paid versions of the plugin, so website owners must manually upgrade to a patched release.
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
If you’re after a cheap printer that won’t cost you a fortune in ink, HP’s Smart Tank 210 is bang on the money. While it’s basic, and it can be achingly slow, it’s surprisingly good at turning out photos or plain paper prints. Most importantly, it arrives with enough ink for around 6,000 pages or more, making it far better value than a cartridge-based equivalent. Unless you only print very occasionally, this printer should save you a tidy sum.
Very cheap to own
Good print quality
Reasonably smart
Review Price:
£130
An ink-tank printer
This printer uses bottles of ink that cost less and last longer than cartridges. It’s a little more expensive to buy, but it should be far cheaper to own in the long run.
Pretty basic
The Smart Tank 210 is a printer only: it can’t scan, fax or copy. It doesn’t have a screen and it can’t automatically print both sides of each page, but you can share it over Wi-Fi.
If you’re after a budget printer, you could spend as little as £40 picking up an entry level inkjet. The problem is that cheap printers often come with punishing running costs; it’s not uncommon for new cartridges to cost as much as the printer did, and to last only a couple of hundred pages. The HP Smart Tank 210 takes a different tack. While it’s significantly more expensive to buy, it’s almost guaranteed to cost you less overall to own.
That’s chiefly because it’s an ink tank printer, fitted with refillable tanks rather than slots for conventional cartridges. It arrives with a full set of bottles that should last for around 6000 full-colour pages – in fact, if you didn’t use black, the three colour bottles could last for more than 10000 prints. You’d spend £100s or even £1000s buying an equivalent number of cartridges or toners for a regular printer.
These low running costs are one of the reasons I love ink-tank printers, but another is that with long-lasting bottles rather than short-lived cartridges, they generate much less plastic waste. In theory, you could buy this printer and churn out 6000 pages for only around £130, a cost-per-page of around 2.2p including the printer. That’s hard to beat, so what’s the HP Smart Tank 210 itself actually like?
There’s not all that much to this printer. It’s a squat off-white box with a few dark grey highlights, and a reasonably uncluttered appearance.
On the back you’ll find a simple extendable paper input tray, which outputs to an even simpler fold-out tray at the front. With no scanner, the top panel is almost featureless apart from a very basic set of buttons and a small LCD.
That would be it if the HP Smart Tank 210 wasn’t an ink tank printer. The splash of colour on its front panel isn’t just for show; the four windows here reveal the levels in its black, cyan, magenta and yellow tanks. It arrives with them empty, so the first job is to fill them up from the provided bottles of ink.
Like most refillable printers, you prime this one for action by simply removing the lid from a bottle, and upending it over the spigot on the relevant tank. Here there’s an important thing to watch out for – this printer’s bottles and tanks aren’t keyed to prevent mixing the colours up. That’s bad enough on a normal inkjet, but with a full tank potentially lasting years, here it could lead to thousands of pages of crossed colours.
Unlike rival ink tank printers from Epson and Canon, you also need to fit the print heads to the HP Smart Tank 210. I found this a needlessly fiddly job, particularly given the relatively narrow access available. Still, at least it’s a one-time only routine. In use you’ll need to keep an eye on the tank levels and top them up occasionally. My experience is that you can typically go many months – or even a couple of years – between refills.
The final setup task is to join this printer to your Wi-Fi, for which you’ll need the HP app. This detects the printer, asks you an unreasonable number of times if you want to share user data, and finally makes the HP Smart Tank 210 available to other devices on your network. If you have a PC you may prefer to download the Easy Start app and opt for the full suite of drivers, but without scan functionality it’s not really necessary.
Ink-tank printers cost more to buy than a cartridge equivalent, and pay you back over the long-term in lower running costs. They usually only become better value than a cheap cartridge device once you’ve printed a couple of thousand pages, which might take some users several years. With that in mind I prefer them to have a multi-year warranty, giving you the reassurance they’ll stay working long enough for you to recoup your money. While I’ve no reason to doubt HP’s build quality, it’s a shame this printer only gets 12 months’ cover.
On the other end of the scale, the HP Smart Tank 210 should save you bucket loads if you print in volume. Extra bottles of ink work out at about 0.2p per black page, or 0.5p for a full-colour page – far cheaper than standard inkjet or laser printers.
There’s precious little else of interest here. Although you can connect and share the HP Smart Tank 210 over a wireless network, there’s no wired Ethernet port or memory card slot. This printer can’t automatically print on both sides of a sheet – you’ll need to manually turn pages over if you want to duplex.
If you’re in a hurry, the HP Smart Tank 210 isn’t the printer for you. It’s not too bad when printing black text, managing to deliver a first page in 13 seconds, and five pages in 36 seconds – that’s equivalent to 8.3 pages per minute (ppm). It’s a bit faster on longer jobs, especially if you can live with slightly less good Draft quality: it printed 20 pages of text at a rate of 10.3ppm.
Things are much, much less impressive in colour. The HP Smart Tank 210 shuffled its feet when printing a lightweight page of black text and colour graphics, delivering a first copy in 29 seconds, and needing fully two minutes to squeeze out five copies. Our 20 page colour job inched along at a woeful 1.8ppm, one of the slowest results we’ve measured in recent years.
Commendably, HP has resisted the urge to de-content this printer in silly ways. It supports borderless printing on paper up to A4, and is happy to turn its hand to the family snaps. Using the Maximum DPI setting means you’ll get up to 4,800×1,200 dots per inch (dpi) quality, but you’ll have to wait a long time to see if it’s any good. I timed a borderless A4 print at a beard-lengthening 14 minutes and 23 seconds. The printer took almost half an hour to hand over six borderless postcard (6×4”) prints.
One of the benefits of a slow printer is that they tend to be quiet, and that’s certainly the case here. It’s easy to live with the Smart Tank 210 in a small home office, or even in the lounge.
Happily, what the 210 lacked in speed it made up for in print quality, beginning with dark, crisp black text that was easily good enough for formal letters or business use. Printing in Draft quality reduced the impact a little, but the results were still quite impressive. Colours stood up well on plain paper, too. Our test graphics looked fairly punchy, if a little undersaturated, and there was nothing to suggest these prints had come from a particularly low-end printer.
The real surprise came when I looked at the photos I’d printed. While no match for a high-end photo printer, these snaps were more than good enough for family scrapbooks or creative projects. The only real disappointment here was that skin tones all seemed a bit too pale, with the fairest people looking almost ashen in a couple of shots.
The HP Smart Tank 210 is inexpensive by ink-tank standards, and ridiculously cheap to run by any measure. It’s a great choice where you want to keep print costs down.
This is a simple printer. It’s slow, it can’t copy or scan, and it’s missing duplex printing. If it sounds too basic for your needs you’ll need to spend more.
I can’t pretend this is the best printer I’ve ever reviewed. If I ran a small business it would be too slow, and I’d bemoan its lack of scan and copy functionality. Even for my home office I’d strongly prefer it to have automatic duplex printing – it’s an easy and convenient way to save on paper.
But park all that. Considering its purchase price and how much ink you get in the box, the HP Smart Tank 210 has to be one of the best value printers you can buy. If I was on a tight budget, and looking for a printer that could deliver a few thousand pages for as little as possible, this one would be right at the top of my list. That could make it ideal for students, writers, or anyone who needs to print a reasonable amount on the smallest budget possible.
You’ll need to install the HP app on a PC, tablet or smartphone. Make sure Bluetooth is on, and that you’re connected to your wireless network, then click the plus button in the app. It should find the printer and configure it for your network.
For many users, yes. An ink-tank printer costs more to buy, but less to run. The more you print, the more likely you are to find that a tank-based device costs less to run than a conventional cartridge-based inkjet, or a laser printer. In practice the breakeven point is typically around 2,000 pages – if you print significantly more than that in the printer’s lifetime you should end up paying a lot less.
The flip side is that if you don’t print that much, or the printer fails before you can and isn’t under warranty, you’ll end up losing out. For this reason it’s ideal to try and get at least a couple of years’ warranty if you can.
| HP Smart Tank 210 Review | |
|---|---|
| Manufacturer | HP |
| Quiet Mark Accredited | No |
| Size (Dimensions) | 434 x 360 x 135 MM |
| Weight | 3.73 KG |
| ASIN | B0GSGG1F19 |
| Release Date | 2026 |
| First Reviewed Date | 13/08/2026 |
| Model Number | 4A8H8A |
| Ports | USB 2 |
| Connectivity | 802.11b/g/n Wi-Fi (2.4GHz only) |
| Ink Cartridge support | 32XL black ink (6,700 pages), 31 cyan, magenta and yellow inks (10,100 pages each) |
| Printer Type | Colour |
| Ink Type | Bottle |
| UK RRP | £130 |
| USA RRP | TBC |
| EU RRP | €156 |
| CA RRP | TBC |
| AUD RRP | TBC |
The third season of Percy Jackson and the Olympians is fast approaching, and at Disney’s D23 convention in Anaheim, California, last weekend, we got a glimpse of what’s to come as the cast answered fan questions during a panel discussion.
Earlier during Disney’s D23 Entertainment Showcase, the show got a fresh, new trailer for November’s third season. Walker Scobell, who plays the title character of Percy Jackson, was joined on stage by Ming-Na Wen (Hera) and Andra Day (Athena) to present the new trailer, which showed Percy fighting underwater and in arenas as a titan emerges.
After the ill-fated, critically panned movies released in the 2010s made it only to the second book in Rick Riordan’s series, the Disney Plus original will be the first time The Titan’s Curse has gotten an adaptation. It follows Percy and his Camp Half-Blood crew on their mission to rescue the goddess Artemis (played by Dafne Keen).
“Season 3 is the season where some people get what they deserve,” Scobell said during Saturday’s panel. There will also be a lot of improv in season 3, Scobell said, with the cast now close enough to play off each other like siblings bantering (which they did, all panel long, arguing over who is the most powerful).
Tamara Smart, who plays Thalia, said scenes exploring the past and Olympus were her favorites to shoot. “Season 3 is the season where women run it,” she said.
“It’s great to play a powerful, confident woman,” Smart added. “She’s 100% angry, 100% sad, 100% yelling at Percy.” (She added that after every single take where she was forced to yell at Scobell, she apologized to him.)
Keen wasn’t allowed to tease much from the upcoming season, but said the newcomers to the show had a huntress camp where they all got to train together, learn as a pack and master archery.
“Love and loss inform all decisions,” she said of Season 3.
Saara Chaudry said bringing Zoë Nightshade to life in the new season “has been the absolute privilege of my life.”
“Season 3 is the season where the stars align,” Chaudry added.
Dan Shotz, a showrunner, writer and executive producer, had some more detailed hints about the upcoming season.
“We have this great source material, and we get to dive a lot deeper… You’re going to see all these great things you love from this book, but so much more,” he said. “We cannot have a season of this show without Annabeth.”
Shotz said we will meet all the gods this season, as well as get to see the junkyard of the gods.
But not everyone makes it out alive, executive producer Jonathan Steinberg said.
“I’m excited for everyone to go on that ride shown in the trailer,” Steinberg said. “The trailer doesn’t lie.”
The eight-episode season streams on Nov. 20 on Disney Plus.
An unpatched vulnerability in Calix GS7 XGS (GS5239XG) residential routers used by multiple U.S. broadband providers allows remote, unauthenticated attackers to create port-forwarding rules that can expose local network devices to the public internet.
The flaw is tracked as CVE-2026-75501 and is described as a missing authentication issue that affects devices running EXOS/6.6.47 firmware.
Security researcher Brian Khan Quintana discovered the flaw and, after trying to notify the vendor on June 7 without success, he reported the vulnerability to the Carnegie Mellon CERT Coordination Center.
Following multiple attempts to contact the vendor and receiving no response, CERT/CC coordinated a public disclosure, and Quintana published the technical details.
Calix is a significant vendor in the US broadband-provider market, working with large entities such as Cox Communications, Brightspeed, ALLO, CityFibre, and Conexon.
The affected model, GS5239XG, is also marketed as the GigaSpire 7u10txg and is a new, premium gateway device that combines Wi-Fi 7 capabilities with an integrated XGS-PON fiber terminal.
The CVE-2026-75501 vulnerability is caused by the device exposing “the MiniUPnPd control endpoint on the WAN interface on TCP port 5000 without access controls.”
“In affected firmware versions, the router binds its UPnP WANIPConnection SOAP service to the public WAN interface on TCP port 5000,” CERT/CC warns.
This allows an attacker on the public web to send the device unauthenticated “SOAP requests to add, delete, or enumerate port mappings, or to query the external IP address.”
This way, hackers can bypass the router’s Network Address Translation (NAT) and firewall protections and expose internal cameras, network-attached storage (NAS) devices, administrative interfaces, and IoT appliances.
“One unauthenticated request from anywhere in the world is enough to open a permanent hole through the router’s firewall to any device inside the house. No password. No prompt. Nothing on screen. The rule survives a reboot,” Quintatna says.
The researcher says that an attacker leveraging the security issue could take the following actions:
Quintana tested the finding by sending requests outside his home network to create a port mapping that exposed an internal address. A mapping configured with no expiration remained active after the router was power-cycled.
This practically means anyone on the internet can instruct vulnerable Calix routers to forward traffic from a public-facing port to a chosen device on the home network.
Given that there’s no fix for CVE-2026-75501, Quintana recommends that users of the vulnerable device disable UPnP through the administrative interface (Advanced → Security → UPnP).
The researcher notes that this workaround disables automatic port opening, which some games rely on, but it’s always possible to open specific ports manually.
CERT/CC also notes that the setting might be locked in some cases, and users who can’t change it should contact their ISP to request the deactivation.
BleepingComputer has contacted Calix for a comment about the flaw, the device models it impacts, and if a patch will be released, but we have not heard back as of publishing.
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
The Trump administration is proposing to make permanent a $103,265 fee on certain new H-1B visas, dramatically increasing costs for employers that rely on highly skilled foreign workers in tech, education, and research. “A federal judge in June ruled that the fee was illegal and blocked the Trump administration from collecting it,” reports Reuters. “A Boston-based appeals court is reviewing that decision while a different court considers whether a judge properly rejected a challenge to the fee by a major business group.” From the report: Trump’s temporary fee increase expires in September, one year after it was issued. The proposed rule by the U.S. Department of Homeland Security, posted in the Federal Register on Monday, would make a fee of $103,265 permanent. It could be finalized by the end of the year. The H-1B program allows U.S. employers to hire foreign workers with training in specialty fields and offers 65,000 visas annually, with another 20,000 for workers with advanced degrees, approved for three to six years. Those visas typically came with fees between $2,000 and $5,000 before Trump’s order. The fee would not apply to visas granted to foreign citizens already in the United States on student visas, who make up a large share of new H-1B recipients, or to renewals of current visas.
Read more of this story at Slashdot.
For most of my career, my IEEE membership sat quietly in the background—a line on my résumé, a discount code for a conference registration, and access to the IEEE Xplore digital library, which I underutilized. I didn’t think much about the grade of membership available above that of the regular member. I assumed senior membership was reserved for people further along in their career than I was. They published more papers, had more gray hair, and had worked longer in the field.
I was wrong on all three counts. The misunderstanding cost me an important validation of my skills and professional competency.
I suspect a lot of other qualified members are where I was one year ago: eligible but unaware of the benefits of senior membership, and one application away from a meaningful career credential.
Here are a few of the misconceptions about senior membership:
It’s mostly for academics and longtime IEEE volunteers. It isn’t. The grade is explicitly built around a person’s professional engineering experience. Plenty of successful applicants have never published a paper. Industry experience counts for a lot.
You need a graduate degree. You don’t. A bachelor’s degree plus enough years of qualifying experience is sufficient on its own. An advanced degree simply offsets some of the required years of experience.
If I’m not well-known in my field, I won’t qualify. Senior membership isn’t a popularity contest. Rather, it hinges on whether you meet specific experience metrics. The requirement is “sustained, significant technical contribution,” not “known beyond your organization.”
I should wait until I have more significant achievements to point to. I believed this for longer than I should have. If you meet the 10-year experience threshold with five years of significant performance, you’re already eligible. Waiting doesn’t strengthen a qualifying application; it just delays getting a credential you’ve already earned.
The push to apply came from a practical need. As a senior data scientist at Apple in Austin, Texas, I work in applied machine learning, building large-scale systems that affect customer-support operations. I already had started taking on more peer-review work—checking papers for journals including Neural Networks and IEEE Transactions on Knowledge and Data Engineering, mentoring at Apple, and writing on public platforms such as Medium and SimpleTalk.
I wanted a credential that reflected that shift from “engineer who codes” to “engineer who helps shape the field.”
The IEEE senior member grade turned out to be the validation of my work I was looking for. It’s not an award for a single achievement. You have to apply for it, and it’s a peer-evaluated process that confirms you’ve sustained a meaningful level of professional contributions over time.
That distinction matters. Having a research paper published or being granted a patent proves a moment in time. Senior membership reflects a pattern of continuous contributions.
The benefits to my career happened faster than I expected. It strengthened how search committees, IEEE conference organizers, and IEEE awards panels viewed me. Only senior members can hold certain IEEE leadership positions.
The senior grade also opened doors to editorial and reviewer roles I hadn’t even pursued before. Journal editors and conference organizers often look for reviewers with a track record they can verify quickly, and senior membership gives them that signal without extra vetting on their end. It also gave me a credential I could point to in professional contexts, including, in my case, supporting documentation for a U.S. employment-based immigration petition, where third-party peer recognition carries real evidentiary weight.
The process for applying for senior membership is easier than the title might suggest. To qualify, you need a combination of professional and academic experience in an IEEE-designated field: engineering, computer science, information technology, physical sciences, mathematics, or technical communications. The two must total at least 10 years, with at least five of them showing significant performance. Crucially, experience isn’t limited to job titles. Graduate research, technical leadership, and progressively responsible engineering work all count toward the total number of years. I’d been quietly accumulating qualifying years without ever framing them that way.
“I suspect a lot of other qualified members are exactly where I was a year ago: eligible but unaware of the benefits of senior membership, and one application away from a meaningful career credential.”
You submit your application through IEEE’s member portal, mapped against the experience requirement, along with three references from current IEEE members—at least two of whom must be senior members or IEEE Fellows who can vouch for the credibility of your work.
The IEEE member grade evaluation committee reviews applications and renders decisions.
The part everyone underestimates is references. Applications can stall at this point. References must be IEEE members in good standing, and at least two need to be IEEE senior members—which means you can’t necessarily ask people who know you best. You need to find references who are both willing to vouch for you and are grade-eligible.
My advice is to identify and confirm all three references before you submit your application. It might be difficult to add or swap a reference during the process, and a stalled reference could delay your file.
Where to find references is the part I worried most about. But it turned out to be far easier than I expected.
Here are several sources:
A pattern I noticed when looking for references is that people are generally glad to be asked. Serving as a reference is a small lift for them and a meaningful one for you. Most senior engineers remember someone doing the same for them and are happy to pay it forward.
If you’ve been in the field for a decade or more, doing real technical work, and IEEE membership has been sitting quietly in the background of your career the way it did in mine, it’s worth 10 minutes to check the eligibility criteria against your history. You might find, as I did, that you qualified for the membership upgrade a while ago.
From Your Site Articles
Related Articles Around the Web
Weekend Open Thread: Madewell – Corporette.com
Musk’s Tesla, SpaceX Confirm $16.8 Billion ‘Terafab’ Chip Plant as World’s Largest Building in Texas
anatomy of crypto’s biggest liquidation event since 2021
SMA Solar Technology AG (SMTGY) Q2 2026 Earnings Call Transcript
Qwen3.8-27B runs frontier-class coding agents and reasoning locally, no cloud API required
6 months on, Irish renters crushed by effects of government housing bill
The ‘Lucky Dip Gang’ causing carnage for clicks: After five thugs were killed speeding in the wrong direction on a motorway, GUY ADAMS investigates a sick new trend… and why police aren’t even allowed to pursue them
GLM-5.3 hits the API at $1.4/$4.4 per million tokens
Don’t Leave Your Financial Future To Chance | August 19, 2026
5 Of The Most Reliable Car Brands To Consider If You’re Buying A Used SUV
Mystery AI Model ‘Ox Alpha’ Draws Developers With Free Access as Chinese Lab Origins Remain Debated
Keychron K8 Ultra 8K review: a great value keyboard with comfort issues
Stock Market Today: Tech Futures Slide As Treasury Yields Jump; Nvidia, Micron, Sandisk Sell Off
Marvell Shares Jump 7% as Google Chip Deal Confirms Custom AI Silicon Partnership, Analysts
Five Below: Kids Discount Retailer Reaps Rich Rewards
Fabrinet (FN) Q4 2026 Earnings Call Transcript
The Dressier Side of Shorts
Ken Okuyama’s Kode89 Supercar Features Three Pedals and a Choice of V12s
The House Opinion Article | Security means more than military spending
Nasdaq Ticks Higher as Wall Street Awaits Retail Earnings and Weighs Fed’s Next Move at Jackson Hole Meeting
You must be logged in to post a comment Login