NASA researchers recently put a new wing design, appearing long and thin with a lightweight structural design, through a series of grueling tests to find its structural limits. What they found left them encouraged about the wing’s potential, even when they pushed it past its intended limits.

The 15-foot Structural Wing Experiment Evaluating Truss-bracing (SWEET-15) test article is part of NASA’s research to develop future ultra-efficient aircraft. The design incorporates a long wing supported by an aerodynamic strut, based on NASA’s earlier Transonic Truss‑Braced Wing concept.

The research team is working to understand whether SWEET-15’s design and its new lightweight structural designs could help commercial airliners save fuel. But first, they need to understand how it behaves under the kinds of force wings experience in flight.

The SWEET-15 design originated with combining five different advanced composite manufacturing and assembly technologies that enabled the novel structural design. The 15-foot-long test article was then designed and fabricated at NASA’s Langley Research Center in Hampton, Virginia, before traveling to NASA’s Armstrong Flight Research Center in Edwards, California, for testing.

Over several months, NASA engineers intentionally bent the test wing in the Flight Loads Laboratory at NASA Armstrong. Numerous strain and load sensors, including fiber-optic strain sensors, were placed throughout the structure to track how the wing responded as forces increased.

The data from the sensors confirmed the predictions made by NASA’s computer models. According to initial findings, the wing withstood the anticipated in-flight forces without issue. The results provided the team with confidence in the new manufacturing approaches and methods for connecting wing parts used in SWEET-15, which could support future efficient aircraft designs. The manufacturing approach, developed at NASA Langley used the Integrated Structural Assembly of Advanced Composites robot, aims to produce lighter and stronger composite structures for aerospace vehicles.

The test concluded with a deliberate test-to-failure, where engineers increased loads beyond the wing’s design limits to determine how and where it would fail. The structure ultimately failed at roughly 127% of its design limit load, with visible damage appearing near the back edge of the wing and in the upper wing cover. This element of testing provided valuable insight into how the joints connecting the wing to its main strut and a secondary one, called a jury strut, behave under forces beyond the expected flight envelope.

This marks the first time a representative composite truss-braced wing configuration has undergone this type of structural evaluation.  It was made possible only through NASA collaboration across centers and projects, with researchers utilizing agency resources such as the Fiber Optic Sensing System developed to gather data on both aircraft and spacecraft.

To prepare for the testing, engineers at NASA Langley designed, analyzed, and manufactured the wing and completed safety preparations and lab setup.

Researchers will now analyze the data collected during testing to inform future airframe designs and support NASA’s ongoing efforts to develop more efficient aviation technologies.

The work is being conducted through NASA’s Subsonic Flight Demonstrator project in the agency’s Research Technology Mission Directorate. The successful testing of multiple innovative components marks a milestone in NASA’s aeronautics research.

To learn more, visit:

https://www.nasa.gov/aeronautics/

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence.

Nearly 60 of the bugs quashed in July’s Patch Tuesday earned a “critical” severity rating, meaning miscreants or malware could use them to seize remote control over a Windows device with little or no help from the user. Microsoft also addressed three zero-day flaws, including two that are already being exploited in the wild.

Two of the zero-day weaknesses allow an attacker to elevate their user rights on a Windows system, as do approximately 250 other elevation of privilege flaws fixed this month; they include CVE-2026-56155 — an Active Directory Federation Services bug — and CVE-2026-56164, a Microsoft Sharepoint vulnerability.

CVE-2026-50661 is a security feature bypass in Windows BitLocker that could allow attackers to gain access to encrypted data if they have physical access to the device. Microsoft said this bug has been detailed publicly, but that it is not aware of any active exploitation.

In a blog post on July 9, Microsoft Executive Vice President Pavan Davuluri wrote that Windows users will notice “a higher volume of security updates included in each security release” as a result of AI aiding in the discovery of vulnerabilities.

“The pace of vulnerability discovery is changing with advances in AI making it possible to find more issues, faster, across more code, with new mechanisms that can accelerate both discovery and analysis,” Davuluri wrote.

Jack Bicer, director of vulnerability research at Action1, called attention to CVE-2026-48561, a remote code execution flaw in Microsoft Copilot (with a 9.6 CVSS threat score) that allows an unauthorized attacker to execute code over the network. Microsoft says an attacker could exploit this bug by hosting a malicious website that causes Microsoft Edge for Android to automatically send crafted prompts to Copilot when a user visits the site.

As AI advances the state of vulnerability discovery and remediation, it is also making it easier for attackers to quickly devise working exploits for known software flaws. Microsoft has long labeled security bugs using its “exploitability index,” which is Redmond’s best guess as to how likely it is that attackers will be able to figure out a reliable way to exploit a given vulnerability.

But Satnam Narang, senior staff research engineer at Tenable, argues that Microsoft’s exploitability index needs to do a better job of shifting with the machine speed of discovery. For example, Microsoft originally gave this month’s SharePoint zero-day an exploitability rating of “less likely,” although the flaw was added to CISA’s Known Exploited Vulnerabilities list on July 1.

“Anthropic’s Red Team’s own findings for known vulnerabilities (n-days) revealed how fragile this system has become, with its Mythos Preview model being able to produce proof-of-concept exploits for 13 of 14 vulnerabilities that were rated ‘Exploitation Less Likely’ or ‘Exploitation Unlikely,'” Narang said. “What this means is that our way of looking at Patch Tuesday has changed, because the exploitability index is centered around humans, not AI tools, and as these tools continue to improve, defense needs to improve alongside it.”

Chris Goettl at Ivanti observed that the record patch numbers from Microsoft come as a number of other major software makers are increasing their patch cadence, including Adobe which announced today it is moving to twice-monthly security bulletins published on the 2nd and 4th Tuesday of each month (Adobe also cited AI for accelerating their patch cycles). Cisco, Mozilla and Oracle also are shipping updates more frequently, while Google’s patch batches in June 2026 totaled more than 900 security fixes, Goettl noted.

Backing up your Windows system and/or data is always a good idea before applying operating system updates. Given the volume of patches addressed this month it may be wise for end users to wait a few days before applying these fixes. It’s not uncommon for security patches to introduce system stability issues, and those chances probably increase quite a bit with the gigantic patch count released today.

Further reading:

Action1’s Patch Tuesday blog

Automox’s rundown

ASPA objects can be registered today with ARIN and RIPE NCC. Validators support RTR v2. But if you're an operator, can you actually see what ASPA is doing - or would do - on your network? We built a tool to find out.