If you pre-ordered the Framework Laptop 13 Pro and were expecting it in June or July, I have some bad news. Framework has emailed customers announcing that shipments are being pushed back by about a month.

According to the email, posted by a Reddit user, the first-batch shipments are moving from late June to late July, with some units possibly slipping into early August. Framework plans to catch up to its original schedule in August, though the company admits the last August batches carry some risk of moving into early September.

Framework 13 Pro is one of the most anticipated laptops for 2026, and its delay will certainly disappoint buyers who have placed pre-orders. That said, the delay appears to be for a good reason.

Why is the Framework Laptop 13 Pro delayed?

As per the email, as Framework was preparing for mass production, it discovered two issues, one with the new haptic touchpad and another with the custom display.

The touchpad issue is the bigger of the two. During testing, Framework found a rare bug that caused the touchpad to reset itself after repeated clicking. The company traced it to an electrical grounding issue in the PCB design and has created a new PCB to fix it. Framework tried a firmware fix on the original design, but units kept failing, so it is now waiting for the new PCBs, which will arrive at its assembly factory in mid-July.

The display issue was simpler. A panel failed to initialize on one unit, and the supplier traced it to an edge case in the initialization parameters. A firmware update has fixed it, and the updated panels won’t delay laptops any further. However, if you pre-ordered the new display separately, your shipment will be delayed by a month. 

What if you don’t want to wait?

If the new timing doesn’t work for you, Framework says your pre-order deposit is fully refundable. That said, a month’s delay is not that long, and I expect most people will not cancel their pre-orders. 

Delays are never fun, but I would rather have a reliable touchpad than a fast shipment. Here’s hoping Framework sticks to its updated schedule.

Cherry XTRFY announced the K63W Pro Compact at Computex 2026, and the standout feature is one you don’t often see in gaming keyboards: Ultra-Wideband technology. With a true 8000 Hz polling rate, this compact keyboard is positioning itself as a serious wireless option for gamers who don’t want to compromise on performance.

What is Ultra-Wideband doing in a keyboard?

Traditional wireless keyboards operate in narrow frequency bands, which is where interference creeps in and causes problems. Ultra-Wideband takes a different approach, transmitting data in short bursts across a much wider frequency spectrum. Cherry XTRFY claims this results in more precise signal timing, reduced interference, and a more stable connection, even in environments packed with wireless signals competing for the same space.

The K63W Pro Compact reports to your computer up to eight times every millisecond in both wired and wireless modes, matching the polling rate you would typically only find in wired keyboards. Cherry XTRFY is also equipping the keyboard with a 6,000 mAh battery, which is a generous capacity a 70% keyboard size. It will ensure that low battery warning doesn’t impact your long gaming sessions. 

What else you get with the new keyboard?

Beyond the wireless specs, Cherry XTRFY also made some notable changes to the physical design. The K63W Pro Compact uses a 70% layout that retains the F-row while trimming the sides down to free up more desk space for mouse movement. 

The keyboard uses CHERRY MX LOW PROFILE 2.0 switches combined with a new gasket construction, which the company says produces softer keystrokes and deeper acoustics than you would typically expect from a low-profile mechanical keyboard. 

Joakim Jansson, Director of Product Management at CHERRY, described the result as “a typing feel you would never expect from a low-profile keyboard.” As for pricing, the keyboard isn’t cheap, but it’s not excessively expensive either. The K63W Pro Compact will be available in the US in August for $169.99.

TL;DR

A critical vulnerability (CVE-2026-8732, CVSS 9.8) in the WP Maps Pro WordPress plugin allows unauthenticated attackers to create admin accounts and take over sites. Wordfence blocked 2,858 exploitation attempts in 24 hours, with the flaw patched in version 6.1.1.

A critical vulnerability in WP Maps Pro, a commercial WordPress plugin with more than 15,000 sales on the Envato Market, is being actively exploited by attackers to create malicious administrator accounts on vulnerable sites. The flaw, tracked as CVE-2026-8732 with a CVSS score of 9.8, allows unauthenticated users to gain full administrative control of any WordPress installation running an unpatched version of the plugin.

Wordfence, which discovered the exploitation campaign, reported blocking 2,858 attacks targeting the vulnerability in the 24 hours prior to its disclosure. The flaw affects all versions of WP Maps Pro up to and including 6.1.0 and was patched in version 6.1.1, released on 20 May 2026. Security researcher David Brown is credited with discovering and reporting the issue.

How the exploit works

WP Maps Pro includes a “temporary access” feature designed to let the plugin’s support staff log into a customer’s site during troubleshooting. The feature exposes an AJAX action called “wpgmp_temp_access_ajax” that can create a new WordPress user with administrator privileges. The security architecture behind the feature was fundamentally flawed: the action was registered with WordPress’s “wp_ajax_nopriv_” hook, meaning it could be called by unauthenticated visitors.

The only protection was a nonce check, a token meant to prevent cross-site request forgery. But the nonce was publicly embedded into every frontend page of the site via the “wpgmp_local” JavaScript object, rendering it useless as an access control mechanism. Any visitor could read the nonce from the page source and use it to invoke the function.

An attacker who calls the endpoint with the parameter “check_temp=false” triggers the “wpgmp_temp_access_support()” function, which unconditionally creates a new WordPress user with the hardcoded role of administrator and returns a magic login URL. Visiting that URL calls “wp_set_auth_cookie()” to fully authenticate the attacker as the newly created admin. The entire chain, from unauthenticated request to full site takeover, requires no credentials, no social engineering, and no prior access.

The plugin and its reach

WP Maps Pro allows site owners to embed customisable Google Maps and OpenStreetMap views with markers, listings, and advanced location features. It is commonly used as a store locator tool for businesses that need to help users find nearby locations, view details, and get directions. The plugin is sold through the Envato Market (CodeCanyon), not through WordPress’s official plugin directory, which means updates are not distributed through the standard WordPress auto-update mechanism.

That distribution model creates a particular risk. Site owners who purchased the plugin may not receive automatic notifications about the security update, and many WordPress installations are maintained by non-technical users or agencies that do not monitor vulnerability disclosures. Unlike large-scale cybercrime infrastructure that law enforcement can target with server seizures, WordPress plugin vulnerabilities are exploited through distributed, automated scanning campaigns that are difficult to disrupt.

What site owners should do

The patch in version 6.1.1 restricts the temporary access endpoint to authenticated administrators only. Site owners running WP Maps Pro should update immediately. Those who cannot update should disable the plugin until they can apply the patch. Checking for unexpected administrator accounts in the WordPress user list is a practical first step to determine whether a site has already been compromised.

The vulnerability is a textbook example of a pattern that recurs across the WordPress ecosystem: a support or debugging feature that grants elevated privileges, protected by a security mechanism that does not actually restrict access. Vulnerability disclosure programmes and security researchers like Brown play a critical role in catching these flaws before they cause widespread damage, but the 2,858 attacks blocked in a single day demonstrate that the window between disclosure and exploitation is now measured in hours, not weeks.

Apple’s MacBook Pro has had a comfortable run as the default laptop for creative professionals. Video editors, photographers, 3D artists, and developers all converged on the device, both because of the performance and the exceptional connectivity and continuity with iPhones. 

Dell thinks it has finally built something that changes that calculus. Announced at Computex 2026, the XPS 16 Creator Edition is Dell’s first laptop built around Nvidia’s new RTX Spark superchip.

This is the NVIDIA RTX Spark Superchip. A new beginning for personal computers.

Designed for creators, AI developers, and gamers, RTX Spark brings over 30 years of NVIDIA innovation to slim Windows laptops and small, ultra-efficient desktop PCs. pic.twitter.com/RmcamHTS4z

— NVIDIA RTX Spark (@NVIDIARTXSpark) June 1, 2026

What does the XPS 16 Creator Edition actually offer?

The RTX Spark architecture at its core combines a high-performance Nvidia GPU with an efficient CPU. It also supports up to 128GB of unified memory, the same approach that made Apple silicon so effective for creative workflows. 

For video editors specifically, Dell says this translates to smoother playback on 4:2:2 4K timelines, along with faster export times. For 3D artists, they should experience improved responsiveness when working across complex, multi-layered scenes. Developers working with AI-assisted tools get reduced reliance on cloud processing.

The XPS 16 Creator Edition comes with a tandem OLED panel with True Black HDR 600 certification, the same underlying technology that has made recent OLED laptops genuinely useful for outdoor usage and color-accurate professional work.

Does it finally fix the port problem?

Yes, and this deserves more credit than you’d think. The XPS 16 Creator Edition ships with a built-in SD card reader and an HDMI port, two ports that photographers and videographers have long had to add via dongles on competing premium laptops. Clearly, Dell isn’t being subtle about who it’s targeting. 

Pricing and a launch date have not been confirmed, but even so, most RTX Spark laptops are expected to arrive in fall 2026.

Dell’s previous attempts at the creative professional market were hamstrung by the same problem every Windows laptop maker faced: Apple’s unified memory architecture. RTX Spark’s unified memory approach removes that structural disadvantage for good.