In the closing moments of Monday’s flight, Starship flexed its flaps to perform a “dynamic banking maneuver” over the Indian Ocean, then flipped upright and fired its engines to slow for splashdown, simulating maneuvers the rocket will execute on future missions returning to the launch site. That will be one of the chief goals for the next phase of Starship’s test campaign beginning next year.

Patience for V3

It will likely be at least a few months before SpaceX is ready to launch the next Starship flight. Technicians at Starbase are assembling the next Super Heavy booster and the first Starship V3 vehicle. Once integrated, the booster and ship are expected to undergo cryogenic testing and static-fire testing before SpaceX moves forward with launch.

“Focus now turns to the next generation of Starship and Super Heavy, with multiple vehicles currently in active build and preparing for tests,” SpaceX wrote on its website. “This next iteration will be used for the first Starship orbital flights, operational payload missions, propellant transfer, and more as we iterate to a fully and rapidly reusable vehicle with service to Earth orbit, the Moon, Mars, and beyond.”

Starship V3 will have larger propellant tanks to increase the rocket’s lifting capacity, upgraded Raptor 3 engines, and an improved payload compartment to support launches of real Starlink satellites. SpaceX will also use this version of the rocket for orbital refueling experiments, a long-awaited milestone for the Starship program now planned for sometime next year. Orbital refueling is a crucial enabler for future Starship flights beyond low Earth orbit and is necessary for SpaceX to fulfill Musk’s ambition to send ships to Mars, the founder’s long-held goal for the company.

It’s also required for Starship flights to the moon. NASA has signed contracts with SpaceX worth more than $4 billion to develop a human-rated derivative of Starship to land astronauts on the moon as part of the agency’s Artemis program. The orbital refueling demonstration is a key milestone on the NASA lunar lander contract. Getting this done as soon as possible is vitally important to NASA, which is seeing its Artemis moon-landing schedule slip, in part due to Starship delays.

After the latest round of mass firings at the US Centers for Disease Control and Prevention over the weekend, the union that represents agency employees estimates that around 3,000 people this year—about a quarter of the agency’s workforce—have departed the agency.

That number includes workers affected by layoffs earlier this year, as well those who have accepted the Trump administration’s “Fork in the Road” buyout program.

The most recent cuts came down amid the ongoing government shutdown. On October 10, more than 1,300 CDC employees received termination notices. Soon after, however, about 700 of those people were told via email that they were mistakenly terminated and were not in fact subject to the reduction in force. An estimated 600 people remain terminated.

An additional 1,300 CDC employees are, according to the union, on administrative leave and being paid but not working.

The Trump administration has not shared official numbers of those targeted by the reductions. The estimate was compiled by the American Federation of Government Employees (AFGE) Local 2883, which represents CDC workers.

The current round of reductions affects the National Center for Chronic Disease Prevention and Health Promotion, the National Center for Health Statistics, the CDC library, the agency’s human resources department, campus safety staff, as well as the CDC’s office in Washington, DC, which acts as a liaison to Congress and provides public health information to policymakers.

“All HHS employees receiving reduction-in-force notices were designated nonessential by their respective divisions,” Andrew Nixon, director of communication at the Department of Health and Human Services, told WIRED via email.

Among those reinstated include staff that publish the agency’s flagship publication, the Morbidity and Mortality Weekly Report, as well as leadership in the National Center for Immunization and Respiratory Diseases and National Center for Emerging and Zoonotic Infectious Diseases, according to AFGE. Members of the Epidemic Intelligence Service, the CDC’s “disease detectives” unit, were also brought back.

Android devices are vulnerable to a new attack that can covertly steal two-factor authentication codes, location timelines, and other private data in less than 30 seconds.

The new attack, named Pixnapping by the team of academic researchers who devised it, requires a victim to first install a malicious app on an Android phone or tablet. The app, which requires no system permissions, can then effectively read data that any other installed app displays on the screen. Pixnapping has been demonstrated on Google Pixel phones and the Samsung Galaxy S25 phone and likely could be modified to work on other models with additional work. Google released mitigations last month, but the researchers said a modified version of the attack works even when the update is installed.

Like Taking a Screenshot

Pixnapping attacks begin with the malicious app invoking Android programming interfaces that cause the authenticator or other targeted apps to send sensitive information to the device screen. The malicious app then runs graphical operations on individual pixels of interest to the attacker. Pixnapping then exploits a side channel that allows the malicious app to map the pixels at those coordinates to letters, numbers, or shapes.

“Anything that is visible when the target app is opened can be stolen by the malicious app using Pixnapping,” the researchers wrote on an informational website. “Chat messages, 2FA codes, email messages, etc. are all vulnerable since they are visible. If an app has secret information that is not visible (e.g., it has a secret key that is stored but never shown on the screen), that information cannot be stolen by Pixnapping.”

The new attack class is reminiscent of GPU.zip, a 2023 attack that allowed malicious websites to read the usernames, passwords, and other sensitive visual data displayed by other websites. It worked by exploiting side channels found in GPUs from all major suppliers. The vulnerabilities that GPU.zip exploited have never been fixed. Instead, the attack was blocked in browsers by limiting their ability to open iframes, an HTML element that allows one website (in the case of GPU.zip, a malicious one) to embed the contents of a site from a different domain.

Pixnapping targets the same side channel as GPU.zip, specifically the precise amount of time it takes for a given frame to be rendered on the screen.