Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue admin accounts.

Both vulnerabilities received a high severity score and require an authenticated session to exploit. They are tracked as CVE-2026-93836, affecting WPC Product Bundles for WooCommerce versions 8.6.6 and older, and CVE-2026-94504, affecting Ninja Forms versions 3.15.3 and older.

The Ninja Forms plugin for WordPress is installed on more than 500,000 sites and allows creating custom forms without writing code.

WPC Product Bundles for WooCommerce allows storing group products into bundles and is active on more than 30,000 WordPress sites.

The campaign was identified on October 4 by researchers at WordPress security platform Patchstack, against users of WPC Product Bundles for WooCommerce. The next day, the same activity was observed against Ninja Forms.

In both attacks, the same JavaScript payload was delivered from ‘imgcdn1[.]com,’ indicating the same threat actor behind the exploitation attempts against the two plugins.

According to the researchers, the attacker tries to plant malicious JavaScript (x.js) in WooCommerce order data or Ninja Forms submissions. When a logged-in administrator loads the content, the script executes using the authenticated WordPress session.

When launched, it retrieves the necessary administrative nonces and uses legitimate WordPress functions to install a malicious plugin masquerading as “WP Smart Thumbnails” version 1.2.4 from “MediaPress Labs” and create an administrator account.

At that stage, the JavaScript payload and the malicious plugin’s PHP scripts establish four access mechanisms to the compromised site:

1. A visible administrator account
2. An administrator account concealed from the WordPress user list in the dashboard
3. A secret login URL that authenticates as the site’s oldest existing administrator
4. An unauthenticated file manager accessible through a direct request to the malicious plugin’s main PHP file

The file manager can’t execute commands, but it could still be used to introduce additional payloads on the site.

Even if the WP Smart Thumbnails plugin is removed from the infected website, the hidden account and secret login URL continue to function as persistence mechanisms through separate auxiliary attack plugins featuring backdated timestamps to evade detection.

“The [hidden] account does not appear in Users → All Users, does not appear in the Administrator filter, and is not counted in the totals above the list,” Patchstack explains, adding that “It is a fully privileged administrator the site owner cannot see.”

Patchstack says that exploitation is currently limited, but advises site admins to upgrade to the latest versions of the affected plugins, WPC Product Bundles for WooCommerce version 8.6.7 or later and Ninja Forms 3.15.4 or later.

Updating the vulnerable plugin prevents further exploitation but does not clean an existing infection. Administrators are strongly recommended to check for signs of compromise.

Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.

Save your seat

The publisher of Wikipedia said Monday that OpenAI agents attempted to hack a note-taking tool it hosts, made unauthorized edits, and sent millions of resource-intensive requests to its infrastructure, in the latest instance of OpenAI systems taking harmful and potentially dangerous actions.

The objective of some of the OpenAI agents’ actions, the Wikimedia Foundation said, was to use Wikipedia as a proxy for fetching data from third-party sites. In one case, the agents posted “malicious edits” that were intended to repurpose a citation tool as a proxy. In another, the agents made unsuccessful attempts to compromise the Wikipedia Etherpad note-taking tool so it would serve the same purpose.

The agents also made millions of automated API requests, crawled millions of pages, and made hundreds of thousands of queries to the Wikidata Query Service. The last action may have contributed to a partial shutdown of the query service in May, the publisher said.

“As a non-profit technology host of some of the largest and most widely used open knowledge platforms in the world, we are deeply concerned about the impact of ‘rogue’ AI agents on platforms like ours, which are built by volunteers from around the world and rely on the promise of the open internet,” Wikimedia said. “Incidents like this one, and the many others that have been (and are still being) uncovered, illustrate how AI agents can drain resources and crash servers, as well as attempt to compromise trustworthy information.”

Agents will be agents

In well over a half-dozen cases, OpenAI agents have been caught taking actions that would likely result in criminal charges being filed had human hackers taken them. During the testing of internal tools that had some of their guardrails disabled, the agents used a makeshift message board to trade notes with each other, discussing ways to hack the network of Hugging Face and obtain answers stored there when the agents were unable to generate the answers on their own.

Other incidents include agents making bizarre self-generated prompts, publishing unauthorized posts to a website to exchange information, accessing non-public data from an Australian government website, and exploiting faulty DNS settings to break out of a sandbox OpenAI had created to keep the agents from accessing the Internet.

Following a July study that found switching from a household gas stove to an electric one can improve asthma symptoms, a new peer-reviewed study published on Tuesday concluded that workers in restaurant kitchens using gas and propane appliances are exposed to air pollution and heat levels that exceed health guidelines.

The National Restaurant Association reports that over 15.7 million Americans work in the food service industry. 

Published in the scientific journal Environmental Research Letters, and in collaboration with chef Christopher Galarza, the study was conducted by researchers from the Stanford Doerr School of Sustainability, the New York University Grossman School of Medicine and PSE Healthy Energy, an independent scientific research institute specializing in bringing science to energy policy. 

According to a press release, this is the first US study to compare air quality and heat levels in restaurant kitchens that use gas appliances with those that use all-electric appliances under real-world working conditions. The study is part of PSE Healthy Energy’s Methane and Health Initiative, which uncovers air quality and health risks associated with methane sources to protect public health and the climate. 

Researchers measured air temperature and air pollutants produced by gas stoves: methane, nitrogen dioxide, carbon monoxide, carbon dioxide and benzene. Measurements were taken in five employee work areas, both during service and overnight, in 21 gas kitchens, three propane kitchens and three all-electric kitchens in California, New York and Pennsylvania. 

“Everyone likely has a favorite restaurant or fast food chain, but most people probably haven’t thought about the equipment being used and how that affects what the staff is experiencing in the kitchen area,” Drew Michanowicz, principal scientist at PSE Healthy Energy, told CNET in an email.

Air pollution findings

When kitchens are not properly ventilated, pollutants can build up and cause harmful health effects, though this depends on individual sensitivity and exposure level. 

During the study, it was discovered that in kitchens with gas or propane appliances, at least one health guideline for pollutant exposure was exceeded during cooking hours. 

About 70% of gas kitchens in the study surpassed the US Environmental Protection Agency’s 1-hour outdoor air standard for nitrogen dioxide. The outdoor standard was used because there is no comparable indoor standard in the US. 

In kitchens with gas or propane appliances, about 170 cumulative hours (about four full work weeks) were recorded in which nitrogen dioxide concentrations exceeded the World Health Organization’s hour-averaged exposure recommendation. This recommendation is roughly equal to the EPA’s outdoor standard, and both apply to the general population.

One kitchen’s 15-minute average nitrogen dioxide level exceeded the National Institute for Occupational Safety and Health’s recommended short-term workplace exposure limit.

Nitrogen dioxide can cause reduced lung function, increased asthma attacks, increased airway inflammation, and worsened cough and wheezing. This gaseous air pollutant has even been tied to causing asthma in children. 

The study also found that carbon monoxide and benzene concentrations exceeded California’s 1-hour exposure guidelines in three and five gas kitchens, respectively. Carbon monoxide poisoning symptoms can range from a headache and dizziness to passing out and death. Benzene, on the other hand, is a carcinogen that has been linked to a higher risk of leukemia and other blood cell cancers.

By comparison, no all-electric kitchen exceeded pollution-exposure health guidelines during cooking hours. 

“This study emphasizes that the concentrations of pollutants in commercial kitchens with gas-fired appliances can reach levels even higher than what we’ve previously observed in homes with gas stoves,” Yannai Kashtan, an air quality scientist at PSE Healthy Energy, told CNET in an email.

Overnight levels matter too

Even outside cooking hours, exposure remains a concern, according to new evidence from the study. 

When gas appliance pilot lights remain lit, and ventilation is turned off, cleaning crews and staff arriving early risk exposure to pollutants. About 71% of the gas kitchens with overnight monitoring recorded higher levels of nitrogen dioxide, carbon monoxide, carbon dioxide, methane and benzene overnight than during service hours.

Aside from contributing to climate change, high concentrations of methane can displace oxygen in the air, causing fatigue, rapid breathing, vomiting, collapse, convulsions, organ damage and death. 

When you consider that commercial gas appliances are also used in hospitals, schools and other buildings, the health concerns extend beyond restaurant kitchens.  

None of the all-electric kitchens exceeded pollutant guidelines overnight. 

Temperature findings

When it came to heat health guidelines, about 68% of gas kitchens with temperature data exceeded 90 degrees Fahrenheit, the Occupational Safety and Health Administration’s proposed high-heat threshold.

Even when temperatures outside were below 75 degrees Fahrenheit, 10 of 13 gas kitchens exceeded 90 degrees Fahrenheit, meaning that high heat in commercial kitchens isn’t directly tied to the weather. 

When a temperature monitor was attached to a chef’s shoulder during a 5-hour cooking session, the average temperature was 92 degrees Fahrenheit, with a maximum of 106 degrees Fahrenheit.

A guideline gap in kitchen worker protection

The study compared its findings with both EPA and WHO guidelines for the general population, which prioritize health protection, and with NIOSH and OSHA guidelines, which are occupational. Researchers found fewer instances of kitchens exceeding workplace thresholds. 

“Compared to benchmarks for the general population, occupational thresholds are higher because they serve a different purpose by also accounting for industry cost and technical feasibility,” Kashtan said. “If work environments are exceeding health-based thresholds but are compliant with the occupational limits that govern enforcement, this points to a gap in health protection for commercial kitchen workers.”

The study’s limitations

Due to the scarcity of all-electric commercial kitchens, only three were used in this study. However, the researchers stated in the study that their findings remain consistent with prior research on nitrogen dioxide concentrations from gas versus electric appliances. 

As about 80% of end-use energy in US commercial cooking is gas, the small number of all-electric kitchens used in the study also reflects the current restaurant industry. 

Only restaurant kitchens in three states were used, so this may not reflect the broader US. Participation was voluntary and partly facilitated through professional partnerships, so selection bias may have been introduced, especially given that kitchens willing to participate likely had better working conditions. 

While sampling locations were chosen to account for different worker roles in the kitchen, pollutant measurements may differ from actual exposure due to a worker’s movement, health, posture and proximity to emission sources. These locations also weren’t monitored continuously; instead, they were sampled for 5 to 12 minutes per cycle. 

Particulate matter and WBGT, which measures occupational heat stress, were not measured. 

Restaurant recommendations

Based on this study, Michanowicz has three recommendations for worker protections in commercial kitchens that use gas appliances. 

First, it’s important to ensure that ventilation systems are properly maintained, as these are usually the first line of defense against pollution and excess heat. However, even with these systems in place, restaurant workers who work directly over a cooking surface can still be exposed to pollution and heat before they reach the ventilation system. 

While converting a commercial kitchen from gas to electric can be challenging and costly, focusing on electrifying gas ranges and fryers first can yield the greatest benefits for indoor air quality. 

“There are also additional benefits that chefs we worked with have mentioned, such as higher worker productivity due to more comfortable kitchen temperatures, reduced cleaning times and reduced burn and explosion risks,” Michanowicz said.

Lastly, for workers in commercial kitchens during off-hours, including cleaning crews, when pilot lights are still on, ventilation systems should be turned on. This applies to workers who arrive early in the morning, as pollution will have built up overnight. 

Gas stove household advice

The recommendations for those with gas stoves at home aren’t dissimilar. 

“The best way to reduce gas combustion pollution is to eliminate the source – the gas flame – and to get an electric radiant or induction stove,” said Kashtan. 

However, if that’s not possible due to cost or because one is a renter, cooking can still be partially electrified with air fryers, electric kettles, rice cookers and portable induction hobs. 

And when you do use your gas stove, always make sure your range hood is on, and consider putting an air purifier in your kitchen. 

Anna Gragert

Senior Editor, Health and Home

Anna Gragert (she/her/hers) was previously the lifestyle editor at HelloGiggles, the deputy editor at So Yummy and the senior lifestyle editor at Hunker. Over the past 12 years, Anna has also written for the LA Times, Elle, Bust Magazine, Dazed, Apartment Therapy, Well+Good and more. At CNET, she’s a senior editor on the Healthy Home team, and her coverage includes health, wellness tech, meal kits and home and kitchen tech with a focus on the technology that aims to help us live our healthiest, happiest lives.

See full bio

• Amazon says over 100 pending proposed moratoriums could threaten America’s lead in AI
• Amazon pledges over $1 billion across five years to data center communities
• Amazon abandons Maryland data center campus beside Calvert Cliffs after community opposition

Amazon has warned that mounting resistance to AI data centers could weaken the United States’ ability to maintain its lead in a rapidly developing technology race.

More than 100 proposed moratoriums on new facilities are under consideration across the country, creating another obstacle for companies expanding computing capacity.

One in five retrenched resident professionals, managers, executives and technicians (PMETs) remain jobless two years after losing their jobs, while four in 10 of those who return to work earn less than before, with a median pay cut of 25%.

Acting Minister for Manpower Jasmin Lau gave these figures in Parliament on Tuesday (Oct 6), according to The Business Times.

The figures come as retrenchments climb in Singapore. In Q2 2026, there were 4,620 retrenchments, the highest level since Q4 2020, up from 3,830 in Q1.

Who’s getting retrenched?

Overall, about seven in 10 retrenched resident PMETs re-entered employment within 12 months, rising to around eight in 10 within two years. This means around two in 10 remained out of work after two years.

Among those who found new jobs, six in 10 earned more than before at both the one- and two-year marks. However, those who took lower-paying jobs saw their wages fall by a median of around 25% from their pre-retrenchment levels.

However, re-employment outcomes varied by age and education level.

Those who were retrenched tended to be older and more highly qualified, with workers in their 40s and 50s making up more than half of the group. Meanwhile, the proportion holding degrees climbed sharply, from 51% in 2021 to 66.4% in 2025.

This pattern flipped for the less formally educated, where workers with secondary schooling or below bounced back faster than average, both in how quickly they found work and how likely they were to do so within six months.

Re-entry rates also varied across industries. Over the past 14 quarters, financial services most often recorded the lowest six-month re-entry rate for retrenched resident PMETs, followed by wholesale trade.

“These figures show that the experience of retrenchment is not the same for every worker,” Lau said. “Some are able to move into new jobs relatively quickly, while others may face greater difficulties because of their age, skills, occupation or the sector they were previously working in.”

Lau was responding to parliamentary questions on retrenchments. Nine Members of Parliament (MPs), including four labour MPs, had filed questions on the issue, touching on re-employment outcomes, retrenchment benefits and support for older workers.

Is AI to blame?

The weaker re-employment outcomes come as retrenchments rise in Singapore.

MOM’s labour market data, released on Sept 21, showed that 4,620 workers were retrenched in Q2 2026, the highest level since Q4 2020, up from 3,830 in Q1.

When Workers’ Party MP He Ting Ru asked whether retrenchments were being driven by artificial intelligence adoption, Lau said: “This is not clear at present, as it is difficult to isolate the specific impact of AI adoption from broader business transformation and reorganisation.”

Only a “small minority” of firms adopting AI had reduced headcount, Ministry of Manpower (MOM) surveys indicated, with more firms instead creating new roles or redesigning jobs.

Business restructuring remains the main driver of retrenchments, Lau added.

More than half of job seekers have benefited from career support services

As workers face a shifting job market, career support and reskilling programmes have helped some displaced workers return to employment.

About six in 10 jobseekers who received career-matching services found employment within six months, Lau said, while nine in 10 Career Conversion Programme (CCP) participants remained employed 24 months after joining.

For mature CCP participants, close to nine in 10 remained employed 12 months after completing the programme.

However, Lau said completing a reskilling programme did not by itself insulate older workers from future retrenchment, particularly in rapidly transforming sectors.

Broader measures are being studied under the Tripartite Workgroup on Senior Employment, a joint effort by MOM, the National Trades Union Congress and Singapore National Employers Federation, with recommendations due later this year, she said.

MOM is in the process of reviewing The Employment Act

Around 88% of employers that submitted mandatory retrenchment notifications in 2025 paid retrenchment benefits.

Of the remaining 12%, about one in five cited financial difficulties, while others pointed to not being obliged to pay, or having provided other forms of support. Among retrenched workers who received no benefits, close to 80% were from companies with fewer than 200 employees.

While retrenchment benefits are not a statutory requirement, Lau said MOM and its tripartite partners are considering whether stronger obligations on employers are warranted as part of the ongoing Employment Act review. An update would be given “in due course”, she said.

The review was announced in March 2025, aiming to keep worker protections strong while preserving flexibility for businesses. The Act was last amended in 2019.

Responding to labour MP Yeo Wan Ling, who asked whether more could be done in cases where employers could afford retrenchment benefits but refused to pay, Lau said one option being considered is “administrative action” against employers in egregious cases, though she did not elaborate on what this could entail.

Tripartite partners also had to weigh stronger worker protections against reasonable business costs, Lau said.

“We do not want to inadvertently place more jobs at risk by imposing a rigid obligation on employers regardless of their situation.”

• Read other articles we’ve written on Singaporean businesses here.

Phone compatibility narrows the smartwatch search quickly. After that, it’s a question of apps, training tools, and how often a charger needs to enter the picture. These five Amazon deals span affordable everyday watches, running companions, and more expensive outdoor models.

Apple Watch SE 3 GPS, 40mm – $199 (20% off)

The Apple Watch SE 3 is where I’d start for an iPhone owner who wants workout tracking and wrist notifications without spending flagship money. Its rated 18-hour battery life means charging will be a regular chore, though fast charging helps. The always-on display is another welcome convenience, and $199 is an easier price to justify for those everyday uses.

Samsung Galaxy Watch8 Classic LTE, 46mm – $389.99 (29% off)

Turning a bezel to scroll through menus has an obvious appeal when the alternative is poking a tiny screen. That’s the Galaxy Watch8 Classic’s draw, alongside styling that looks less like a workout accessory. Its 46mm case won’t suit every wrist. For Android users comfortable with the size, the Prime-exclusive $160 discount makes the LTE edition more tempting.

Garmin Forerunner 165 – $209.99 (16% off)

Check the name before buying: this is the Standard Forerunner 165, so downloaded playlists require the Music edition instead. Suggested workouts and recovery guidance are the reasons to choose this one, particularly for runners who don’t need Garmin’s more expensive watches. The $40 discount is modest, but the combination of running tools, touchscreen, and physical buttons gives it a clear job.

Garmin Instinct 3 AMOLED, 45mm – $349 (22% off)

The Instinct 3’s built-in flashlight is an extra I’d actually use. Its rugged construction and long battery life also suit outdoor days when charging a watch is low on the agenda. Full onboard maps are missing, so that’s a reason to spend more on the Epix. Otherwise, this $349 Garmin covers the tougher-watch brief for considerably less.

Garmin Epix Pro (Gen 2) Sapphire, 47mm – $529.99 (47% off)

The Epix Pro is more watch than most people need for counting steps and logging occasional workouts. Its onboard maps and deeper training tools are what make the extra spending worthwhile, with sapphire glass and a titanium bezel adding appeal. At $470 below its listed price, this older premium Garmin deserves attention from buyers who’ll put those features to work.

“While Chrome took steps during these incidents to identify and block suspected unauthorized certificates across the affected ccTLDs, browser-side intervention should not be relied on to protect your users,” Google said. “Due to the complexity of DNS hijacks, we cannot guarantee that our analysis identified every affected domain, nor do Chrome interventions reliably protect non-Chrome users.”

It’s not immediately clear what the other affected organizations are, how many unauthorized certificates were issued, or if all of them, except for those for Google domains, have been blocked. The process for officially revoking certificates is slow and cumbersome, so browser makers have devised quicker methods to block specific certificates at the browser level. With all known unauthorized certificates now blocked, the risk is mitigated, but as Google noted, any certificates that remain undiscovered pose a threat.

Google noted that the incident didn’t involve the compromise of the infrastructure of any of the affected domain owners and that certificate authorities followed all requirements. With control of the three ccTLDs, the attackers were able to change the IP addresses of a selected list of websites. With the ability to send and receive traffic on those sites, the attackers were able to modify authoritative DNS records and nameserver delegations for selected domains, allowing them to pass industry validation checks requiring an applicant to prove control of the domain.

This isn’t the first time threat actors have obtained unauthorized certificates. A 2011 hack of Netherlands-based certificate authority DigiNotar allowed attackers to mint counterfeit certificates for Google.com and more than 200 other high-traffic domains. The certificates were used against at least 300,000 people with ties to Iran as they browsed the sites impersonated by the forged certificates. There have been many similar incidents since, most often through failures by certificate authorities but also domain holders.

Samsung’s Galaxy S26 Ultra, priced at $979.99 for Prime Day (was $1,400), still carries the flat sides and a tucked-away S Pen, now inside a body that measures 163.6 by 78.1 by 7.9 millimeters and weighs 214 grams. Outdoor glare has less room to win on the 6.9-inch Dynamic AMOLED panel, which shifts between 1Hz and 120Hz, resolves 3120 by 1440, and is rated to a peak of 2600 nits, with an anti-reflective coat and a privacy setting that narrows the viewing angle so a neighbor on the train sees less of the screen. Four cameras sit in the rear island: a 200-megapixel main sensor opened to f/1.4, a 50-megapixel ultrawide, a 10-megapixel lens at 3x, and a 50-megapixel periscope at 5x opened to f/2.9, covering stills out to a claimed 100x digital reach and 8K video from the main sensor, with a 12-megapixel camera up front. Qualcomm’s Snapdragon 8 Elite Gen 5 for Galaxy, built on a 3-nanometer process, pairs with 12GB of memory. A 5,000mAh cell refills at 60 watts on a cable and 25 watts on a Qi2 wireless pad, and the phone carries an IP68 rating for dust and a short dip in water.

5. Meta Quest 3S – $350 $297.49

Meta’s Quest 3S 128GB Gorilla Tag Bundle ships a standalone headset, a pair of Touch Plus controllers, and an Amazon-only set of Gorilla Tag extras, including exclusive in-game items and 1,000 shiny rocks. Play runs on the headset itself, driven by a Snapdragon XR2 Gen 2 chip and 8GB of memory, with 128GB of storage for installs and a path to a desktop library over Wi-Fi or a USB-C cable. Each eye looks through Fresnel lenses at an LCD panel of 1832 by 1920, refreshing at up to 120Hz, with a field of view near 96 degrees and three fixed lens positions for different face widths. Color cameras on the front show the room in full color, so a virtual table can sit on a real one, and tracking follows both the controllers and bare hands. A session usually lasts about two to two and a half hours before the included adapter has to refill the battery. Built-in speakers and a microphone cover room sound and voice chat, and the headset weighs about 514 grams with the strap on. This bundle also opens a stretch of Meta Horizon+ with a rotating shelf of more than 40 games from the first setup. Product page.

4. Apple Watch SE 3 (GPS, 44mm) – $279 $229

Apple’s Watch SE 3 in the 44mm GPS size sits in an aluminum case that measures 44 by 38 by 10.7 millimeters and weighs 32.9 grams, finished in Midnight or Starlight. An always-on Retina OLED panel fills 368 by 448 pixels at 326 pixels per inch, brightening to 1000 nits outside and dimming to 2 nits at night, behind Ion-X glass. An S10 chip with a dual-core processor, a 4-core Neural Engine, and 64GB of storage runs watchOS 26, with a Digital Crown, a side button, and gestures for a double tap or a wrist flick. Heart rate, high and low alerts, irregular rhythm notices, sleep stages, a sleep score, and sleep apnea notifications come from a second-generation optical sensor, joined by a temperature sensor, compass, and always-on altimeter. Built-in GPS, GLONASS, Galileo, and QZSS handle outdoor routes without a cellular radio, so the watch stays tied to a nearby iPhone for calls and messages. A full day of ordinary use is rated at about 18 hours, stretching to 32 hours in Low Power Mode, and a fast charge reaches about 80 percent in 45 minutes. Water resistance is rated to 50 meters, with a speaker and microphone for timers, music, and voice replies. Product page.

3. Bambu Lab A1 Mini 3D Printer – $249 – $212.90

Bambu Lab’s A1 Mini is an open-frame 3D printer with a steel and aluminum chassis, a build area of 180 by 180 by 180 millimeters, and a body that measures 347 by 315 by 365 millimeters at 5.5 kilograms. An all-metal hot end with a 0.4 millimeter stainless nozzle reaches 300 degrees Celsius, and the PEI plate tops out at 80 degrees, a pairing suited to PLA, PETG, TPU, and PVA. The toolhead is rated for 500 millimeters per second and 10,000 millimeters per second squared of acceleration, with automatic bed leveling, vibration compensation, and a built-in filament cutter so a first print can start after a short setup. A run-out sensor, a tangle sensor, power-loss recovery, and a camera for time-lapse sit on the machine, while a 2.4-inch touchscreen handles local jobs alongside Wi-Fi, the Bambu Handy app, and Bambu Studio on a computer. One AMS lite can feed up to four colors when that unit is attached, while power draw is rated at 150 watts on a standard wall outlet. Product page.

2. Ninja CREAMi 7-in-1 Frozen Dessert Maker – $220 $169.99

Ninja’s CREAMi 7-in-1 takes a frozen pint and turns it into ice cream, gelato, sorbet, a milkshake, a smoothie bowl, or a lighter ice cream, with a seventh program for folding in mix-ins. A base goes into a 16-ounce pint, spends the night in the freezer, then meets a Creamerizer paddle that works through the solid block in a couple of minutes. Re-spin is there when the first pass comes out too firm, and chocolate, nuts, candy, or fruit can go in on the mix-in setting. The NC301 setup includes the motor base, an outer bowl with a lid, the paddle, and two pints with storage lids, so one flavor can freeze while another is already finished. An 800-watt motor drives the process, and the pints, lids, and paddle can go on the top rack of a dishwasher. The unit stands about 16 inches tall, 12 inches wide, and 6.5 inches deep. Product page.

1. 13″ MacBook Air M5 – $1,799 $1,599

Apple’s 13-inch MacBook Air with M5 packs a 10-core CPU, an 8-core GPU that can be ordered with 10 cores, a 16-core Neural Engine, and 153GB/s of memory bandwidth into an aluminum body that measures 0.44 inch thick and weighs 2.7 pounds. This configuration features 24GB of unified memory, a 1TB SSD, and a 13.6-inch Liquid Retina panel that runs at 2560 by 1664 and 224 pixels per inch, peaks at 500 nits, and covers the P3 range with True Tone. Two Thunderbolt 4 ports, a MagSafe 3 charger, and a headphone jack handle power and peripherals, and the machine can drive two external displays at once. A 12-megapixel Center Stage camera, a four-speaker system, Touch ID, and a backlit keyboard sit in the same chassis. A 53.8-watt-hour battery is rated for up to 18 hours of video streaming and 15 hours of wireless web, with Wi-Fi 7 and Bluetooth 6 for the connection. Product page.

Argentina vs Benin is as unlikely a fixture as any to go down in football folklore. The international friendly, and first ever meeting, between two sides separated by the Atlantic Ocean and 87 places in the FIFA rankings will serve as the final footnote of Lionel Messi’s international career.

At the age of 39, and with the next World Cup just under four years away, that familiar scurrying figure has decided his work is done. The Atomic Flea will leave the stage with a record 208 Albiceleste  caps and 125 goals – plus however many he’s able to conjure against the west African side.