The hardest choice to make for building your next MacBook might be selecting a color. According to Bloomberg‘s Mark Gurman, Apple has tested colors including light yellow, light green, blue and pink for its next entry-level MacBook that’s aimed at students and enterprise users.

Beyond the more vibrant colors, Gurman said that Apple has also trialed its classic silver and dark gray colorways for its cheaper laptop. Gurman added that not all of these six colors will make it to the final product, but Apple has recently shown it’s not afraid to dip into flashier options. Apple refreshed the iMac in 2024 with a total of seven colors and swapped out the space gray option for sky blue for the latest MacBook Air.

Color choices aside, the latest rumors point to the upcoming MacBook having a price tag that’s anywhere between $699 and $799. To achieve that lower price point, Apple is expected to port over its chips designed for iPhones, like the A18 Pro that we first saw with the iPhone 16 Pro Max. We’re also anticipating Apple will compromise on specs, ports, or even the display, but Gurman reported that the company won’t be skimping when it comes to the shell. According to Gurman, Apple will employ a new manufacturing process to craft aluminum shells for the affordable MacBook, instead of opting for a cheaper material like plastic to cut costs. We may not have to wait long to see the official colors of the budget MacBook, as Gurman reported that it will be announced during an event in March.

Welcome back to TechCrunch Mobility — your central hub for news and insights on the future of transportation. To get this in your inbox, sign up here for free — just click TechCrunch Mobility!

We are in the midst of one of my four favorite times of year — earnings season. And it’s not just that I like numbers. These required filings cut through a lot of the marketing noise presented by companies the rest of the year. They also help me assess the short- and long-term stakes the companies face.

Rivian’s fourth-quarter and full-year earnings did precisely that. My takeaway: Software, and specifically its technology joint venture with Volkswagen Group, was the company’s savior in 2025. It will also buoy the company into 2026 (another $2 billion is expected from VW Group) as Rivian launches its most important product to date: the lower-cost R2 SUV. 

The company’s earnings also provided a progress report on its bid to lower the cost of goods sold per unit. The TL;DR is that the cogs per unit for its current portfolio is still high but dropping, meaning it’s losing less on each vehicle it sells. According to Rivian, the company’s automotive cogs per unit delivered was $100,900 in 2025, down from $110,400 in 2024. 

The upcoming R2, which is supposed to be considerably cheaper (both in production cost and price tag) than its flagship R1T truck and R1S SUV, will be the next big test. We’ll get some insight into the results of that later this year.

The R2 is expected to go into production in the first half of the year (we’re hearing June), and based on its guidance for 2026, Rivian is confident it has the demand and the ability to ramp production. The company expects to deliver between 62,000 and 67,000 vehicles in 2026 — which could provide up to a 59% bump from last year. Rivian delivered 42,247 vehicles in 2025, which includes its two R1 consumer vehicles and the electric delivery van (EDV).

The market loved that guidance, btw. Rivian stock shot up 27% in the day after it reported earnings.

A little bird

Over the past 18 months, I’ve noticed a divergence in how Uber and Lyft are approaching AVs. Uber is locking up AV partnerships with every player it can. Lyft is trailing behind. Turns out, I am not alone in this observation. 

Insiders have shared their puzzlement about why Lyft hasn’t been more aggressive on this front. They noted that Lyft is sitting on about $1.8 billion in cash, cash equivalents, and restricted cash, and recently announced a new $1 billion share repurchase program that represents about 15% of its market cap, per CNBC. That has some wondering why Lyft did not invest in parts of the AV value chain like Uber is doing versus buying shares back.

Meanwhile, these little birds also pointed to a few top executives who have departed over the past year. Aurélien Nolf left his position as VP of financial planning and analysis and investor relations to become CFO of Navan. Audrey Liu, who was an executive VP and head of rider and community safety, is now at Adobe. Ameena Gill, who was VP of safety and customer care just took a job at rival Uber.

Got a tip for us? Email Kirsten Korosec at kirsten.korosec@techcrunch.com or my Signal at kkorosec.07, or email Sean O’Kane at sean.okane@techcrunch.com. 

Deals!

Close followers of the mobility-crazed years, between 2015 and 2019, might recall how many lidar companies popped up during that time. Many of the dominant and buzziest ones have since shuttered, while some of the smallest players have hung on and expanded. 

Take Ouster, for instance. I remember way back when Ouster had this tiny little booth in the jam-packed startups area (Eureka Park) at CES. Today, the company is much bigger — thanks to scale, its 2022 merger with rival Velodyne, and its acquisition of Sense Photonics in 2021. And it doesn’t appear to be finished. 

The company most recently acquired Stereolabs, a company that makes vision-based perception systems for robotics and industrial applications, for a combination of $35 million and 1.8 million shares.

As TechCrunch senior reporter Sean O’Kane notes in his article, the deal is the latest in a march toward consolidation among perception sensor suppliers. (Just last month, MicroVision bought the lidar assets of the buzzy-but-now-bankrupt Luminar for $33 million.)

So why all the activity? It’s complicated, as they say. From my POV, the frenzy around “physical AI” has reignited interest and investment in sensor technologies, particularly cameras.

Other deals that got my attention …

Ever, the EV-only marketplace, raised $31 million in a Series A funding round led by Eclipse. Other backers include Ibex Investors, Lifeline Ventures, and JIMCO — the investment arm of the Saudi Arabian Jameel family (an early investor in Rivian).

Natilus, the San Diego-based startup developing blended-wing aircraft, raised $28 million in a Series A funding round led by Draper Associates. Other investors include Type One Ventures, The Veteran Fund, and Flexport, as well as new backers New Vista Capital, Soma Capital, Liquid 2 VC, VU Venture Partners, and Wave FX.

Notable reads and other tidbits

Aurora shared in its Q4 and full-year earnings report that its self-driving trucks can now travel nonstop on a 1,000-mile route between Fort Worth and Phoenix — exceeding what a human driver can legally accomplish. The company shared a number of other tidbits, and financials, which you can read about here. 

The U.S. Securities and Exchange Commission closed its investigation into Fisker last year, TechCrunch was able to learn, thanks to a Freedom of Information Act request. 

Lyft has launched teen accounts, a product that allows minors as young as 13 to hail a ride without an adult in 200 U.S. cities, including Atlanta, Boston, Chicago, and New York.

A fresh batch of videos gives us the best look at how Rivian has changed the rear door manual release on its upcoming R2 SUV. This seemingly minor design detail has life-or-death stakes and comes as the EV industry, and particularly Tesla, is getting pressure to change concealed, electronic door handles. 

The Trump administration officially repealed the EPA’s 2009 “endangerment finding,” which found that greenhouse gases such as carbon dioxide and methane were a threat to human health and welfare. This change would only affect tailpipe emissions for cars and trucks — if the EPA makes it through the lengthy process of repealing the law, which will certainly include numerous lawsuits aimed at stopping it.

Uber has locked in a couple dozen AV partnerships, and we’re starting to see the results of those deals. China’s Baidu and Uber plan to launch robotaxis in Dubai in the next month, starting with select locations within the Jumeirah area. Meanwhile, Chinese robotaxi company WeRide and Uber announced a “major expansion of their strategic partnership” to deploy at least 1,200 robotaxis across the Middle East through 2027, according to the companies. As part of this, WeRide and Uber have launched a robotaxi service in downtown Abu Dhabi.

Waymo pulled the human safety driver from its autonomous test vehicles in Nashville as the Alphabet-owned company moves closer to launching a robotaxi service in the city. Meanwhile, this tech-forward company is wrestling with the analog problem of ensuring the doors of its robotaxis are properly shut. Its solution? Pay DoorDash gig workers to shut Waymo robotaxi doors. Waymo tells us this is a pilot program in Atlanta to enhance its AV fleet efficiency. 

One final Waymo item: The company is starting to roll out its sixth-generation “Waymo Driver,” which is integrated into the Zeekr RT (rebranded Ojai) and will eventually be in the Hyundai Ioniq 5. Waymo has started “fully autonomous operations” in the Ojai vehicle in San Francisco and Los Angeles and is giving access to employees. The public will have to wait for a bit.

One more thing …

Rivian has pitched its upcoming R2 SUV as a more affordable model. What does “more affordable” mean? The company has thrown around $45,000 and $50,000 as a base price. The company’s launch version of the R2, which will be a dual-mode and all-wheel-drive premium trim, will undoubtedly be more expensive. In our newsletter this week, we asked readers, “What’s your guess on the cost of the launch edition?”

Sign up for our newsletter to participate in our polls!

One of the most anticipated devices in Apple’s 2026 portfolio is a low-cost MacBook, one that could be priced in the $700-800 ballpark. Currently in development under the codename J700, Bloomberg now reports that the upcoming laptop will feature a metallic chassis and might come in “playful colors.”

What’s coming?

“To stick with this premium material, Apple developed a new manufacturing process that allows the shells to be forged more quickly. The technique is designed to be both faster and more cost-effective than the one used with Apple’s current laptops,” says the report, which further adds that the machine could hit the shelves next month.

It was widely expected that the entry-level MacBook could trade the expensive metallic shell for plastic to bring down costs. But it appears that Apple wants to keep the signature in-hand feel of a MacBook despite the lower price tag. As far as colors go, the company has reportedly tested shades such as blue, classic silver, dark gray, light green, light yellow, and pink. 

It’s unclear whether the upcoming Apple laptop will stick with the same design as the current-gen MacBook Air, or whether the company will bring back the iconic wedge design of the 12-inch MacBook. Bloomberg reports the machine will feature a screen smaller than 13 inches, which raises hopes that Apple just might pull a blast from the past trick. 

What else?

Another standout aspect of the machine is going to be the mobile-class chipset. Instead of an M-series processor, which is now a mainstay across the Mac line-up and even the high-end iPads, the pocket-friendly MacBook will reportedly come equipped with an iPhone-class A-series processor.  

Does that mean cellular connectivity will also be part of the package? That seems unlikely, but now that Apple is making its own modems, it’s plausible that Apple might use the upcoming MacBook as a test bed and eventually offer the facility on the upcoming slate of MacBook Pro machines. 

Bloomberg reports that Apple will predominantly market its low-cost MacBook in the education and enterprise segments. How well it stacks up against Windows on Arm machines with Qualcomm’s Snapdragon X-series processors remains to be seen, but it’s definitely not going to be a sluggish mess. 

CTM360 reports that more than 4,000 malicious Google Groups and 3,500 Google-hosted URLs are being used in an active malware campaign targeting global organizations.

The attackers abuse Google’s trusted ecosystem to distribute credential-stealing malware and establish persistent access on compromised devices.

The activity is global, with attackers embedding organization names and industry-relevant keywords into posts to increase credibility and drive downloads.

Read the full report here: https://www.ctm360.com/reports/ninja-browser-lumma-infostealer

How the campaign works

The attack chain begins with social engineering inside Google Groups. Threat actors infiltrate industry-related forums and post technical discussions that appear legitimate, covering topics such as network issues, authentication errors, or software configurations

Within these threads, attackers embed download links disguised as: “Download {Organization_Name} for Windows 10”

To evade detection, they use URL shorteners or Google-hosted redirectors via Docs and Drive. The redirector is designed to detect the victim’s operating system and deliver different payloads depending on whether the target is using Windows or Linux

 

Windows Infection Flow: Lumma Info-Stealer

For Windows users, the campaign delivers a password-protected compressed archive hosted on a malicious file-sharing infrastructure

Oversized archive to evade detection

The decompressed archive size is approximately 950MB, though the actual malicious payload is only around 33MB. CTM360 researchers found that the executable was padded with null bytes — a technique designed to exceed antivirus file-size scanning thresholds and disrupt static analysis engines.

AutoIt-based reconstruction

Once executed, the malware:

• Reassembles segmented binary files.

• Launches an AutoIt-compiled executable.

Advertisement

• Decrypts and executes a memory-resident payload.

The behavior matches Lumma Stealer, a commercially sold infostealer frequently used in credential-harvesting campaigns

Observed behavior includes:

• Browser credential exfiltration.

• Session cookie harvesting.

• Shell-based command execution.

Advertisement

• HTTP POST requests to C2 infrastructure (e.g., healgeni[.]live).

• Use of multipart/form-data POST requests to mask exfiltrated content.

CTM360 identified multiple associated IP addresses and SHA-256 hashes linked to the Lumma-stealer payload.

Linux Infection Flow: Trojanized “Ninja Browser”

Linux users are redirected to download a trojanized Chromium-based browser branded as “Ninja Browser.”

The software presents itself as a privacy-focused browser with built-in anonymity features.

However, CTM360’s analysis reveals that it silently installs malicious extensions without user consent and implements hidden persistence mechanisms that enable future compromise by the threat actor.

Malicious extension behavior

A built-in extension named “NinjaBrowserMonetisation” was observed to:

• Track users via unique identifiers

• Inject scripts into web sessions

• Load remote content

• Manipulate browser tabs and cookies

Advertisement

• Store data externally

The extension contains heavily obfuscated JavaScript using XOR and Base56-like encoding

While not immediately activating all embedded domains, the infrastructure suggests future payload deployment capability.

Silent persistence mechanism

CTM360 also identified scheduled tasks configured to:

• Poll attacker-controlled servers daily

• Silently install updates without user interaction

Advertisement

• Maintain long-term persistence

Additionally, researchers observed that the browser defaults to a Russian-based search engine named “X-Finder” and redirects to another suspicious AI-themed search page

The infrastructure appears tied to domains such as:

• ninja-browser[.]com

• nb-download[.]com

Advertisement

• nbdownload[.]space

Campaign Infrastructure & Indicators of Compromise

CTM360 linked the activity to infrastructure, including:

IPs:

• 152.42.139[.]18

• 89.111.170[.]100

C2 domain:

Multiple SHA-256 hashes and domains associated with credential harvesting and info-stealer distribution were identified and are available in the report.

Risks to organizations

Lumma Stealer risks:

Ninja Browser risks:

• Silent credential harvesting

• Remote command execution

• Backdoor-like persistence

Advertisement

• Automatic malicious updates without user consent

Because the campaign abuses Google-hosted services, the attack bypasses traditional trust-based filtering mechanisms and increases user confidence in malicious content.

Defensive recommendations

CTM360 advises organizations to:

• Inspect shortened URLs and Google Docs/Drive redirect chains.

• Block the IoCs at firewall and EDR levels.

Advertisement

• Educate users against downloading software from public forums/sources without verification.

• Monitor scheduled task creation on endpoints.

• Audit browser extension installations.

The campaign highlights a broader trend: attackers are increasingly weaponizing trusted SaaS platforms as delivery infrastructure to evade detection.

About the Research

The findings were published in CTM360’s February 2026 threat intelligence report, “Ninja Browser & Lumma Infostealer Delivered via Weaponized Google Services”

CTM360 continues to monitor this activity and track related infrastructure.

Read the full report here: https://www.ctm360.com/reports/ninja-browser-lumma-infostealer

Detect Cyber Threats 24/7 with CTM360

Monitor, analyze, and promptly mitigate risks across your external digital landscape with the CTM360.

Join our Community Edition

Sponsored and written by CTM360.

In the scramble for the interface, Glean is betting on something less visible: becoming the intelligence layer beneath it. 

Seven years ago, Glean set out to be the Google for enterprise — an AI-powered search tool designed to index and search across a company’s SaaS tool library, from Slack to Jira, Google Drive to Salesforce. Today, the company’s strategy has shifted from building a better enterprise chatbot to becoming the connective tissue between models and enterprise systems.

“The layer we built initially – a good search product – required us to deeply understand people and how they work and what their preferences are,” Jain told TechCrunch on last week’s episode of Equity, which we recorded at Web Summit Qatar. “All of that is now becoming foundational in terms of building high quality agents.”

He says that while large language models are powerful, they’re also generic. 

“The AI models themselves don’t really understand anything about your business,” Jain said. “They don’t know who the different people are, they don’t know what kind of work you do, what kind of products you build. So you have to connect the reasoning and generative power of the models with the context inside your company.”

Glean’s pitch is that it already maps that context and can sit between the model and the enterprise data. 

The Glean Assistant is often the entry point for customers — a familiar chat interface powered by a mix of leading proprietary (ie, ChatGPT, Gemini, Claude) and open-source models, grounded in the company’s internal data. But what keeps customers, Jain argues, is everything underneath it. 

First is model access. Rather than forcing companies to commit to a single LLM provider, Glean acts as the abstraction layer, allowing enterprises to switch between or combine models as capabilities evolve. That’s why Jain says he doesn’t see OpenAI, Anthropic, or Google as competition, but rather as partners. 

“Our product gets better because we’re able to leverage the innovation that they are making in the market,” Jain said. 

Second are the connectors. Glean integrates deeply with systems like Slack, Jira, Salesforce, and Google Drive to map how information flows across them and enable agents to act inside those tools. 

And third, and perhaps most important, is governance. 

“You need to build a permissions-aware governance layer and retrieval layer that is able to bring the right information, but knowing who’s asking that question so that it filters the information based on their access rights,” Jain said. 

In large organizations, that layer can be the difference between piloting AI solutions and deploying them at scale. Enterprises can’t simply load all their internal data into a model and create a wrapper to sort out the solutions later, says Jain. 

Also critical is ensuring the models don’t hallucinate. Jain says its system verifies model outputs against source documents, generates line-by-line citations, and ensures that responses respect existing access rights. 

The question is whether that middle layer survives as platform giants push deeper into the stack. Microsoft and Google already control much of the enterprise workflow surface area, and they’re hungry for more. If Copilot or Gemini can access the same internal systems with the same permissions, does a standalone intelligence layer still matter?

Jain argues enterprises don’t want to be locked into a single model or productivity suite and would rather opt for a neutral infrastructure layer rather than a vertically integrated assistant.

Investors have bought into that thesis. Glean raised a $150 million Series F in June 2025, nearly doubling its valuation to $7.2 billion. Unlike the frontier AI labs, Glean doesn’t need massive compute budgets.

“We have a very healthy, fast-growing business,” Jain said.

India has 100 million weekly active ChatGPT users, making the country one of OpenAI’s largest markets globally, CEO Sam Altman said ahead of a government-hosted AI summit.

On Sunday, Altman outlined ChatGPT’s growing adoption in India in an article published in the Indian English daily Times of India, as OpenAI prepares to formally participate in the five-day India AI Impact Summit in New Delhi, beginning Monday. Altman is attending the event alongside senior executives from several of the world’s leading AI companies.

The growth comes as OpenAI, like other leading AI firms, looks to India’s young population and its more than a billion internet users to fuel global expansion. The ChatGPT maker opened a New Delhi office in August 2025 after months of groundwork in the country, and has adjusted its approach for India’s price-sensitive market, including rolling out a sub-$5 ChatGPT Go tier that was later made free for a year for Indian users.

In the article, Altman said India is ChatGPT’s second-largest user base after the United States, highlighting the South Asian nation’s growing weight in OpenAI’s global strategy. The disclosure comes as ChatGPT’s overall usage has surged worldwide, with the platform reaching 800 million weekly active users as of October 2025 and reported to be approaching 900 million.

Altman also highlighted the role of students in driving adoption, saying India has the largest number of student users of ChatGPT globally.

Indian students have become a key growth segment for leading AI companies more broadly, as rivals race to embed their tools in classrooms and learning workflows. Google has similarly targeted the market, offering Indian students a free one-year subscription to its AI Pro plan in September 2025. Separately, India accounts for the highest global usage of Gemini for learning, Chris Phillips, Google’s vice president and general manager for education, said last month.

“With its focus on access, practical Al literacy, and the infrastructure that supports widespread adoption, India is well positioned to broaden who benefits from the technology and to help shape how democratic AI is adopted at scale,” Altman wrote.

ChatGPT’s rapid growth also highlights a broader challenge for AI companies in India: translating widespread adoption into sustained economic impact. Indian government initiatives such as the IndiaAI Mission — a national program aimed at expanding computing capacity, supporting startups and accelerating AI adoption in public services — seek to address those gaps. However, the country’s price-sensitive market and infrastructure constraints have made monetization and large-scale deployment more complex than in developed economies.

“Given India’s size, it also risks forfeiting a vital opportunity to advance democratic AI in emerging markets around the world,” Altman wrote, warning that uneven access and adoption could concentrate AI’s economic gains in too few hands.

Altman also signaled that OpenAI plans to deepen its engagement with the Indian government, writing that the company would soon announce new partnerships aimed at expanding access to AI across the country. He did not provide details, but said the focus would be on widening reach and enabling more people to put AI tools to practical use.

The India AI Impact Summit is expected to draw a wide cross-section of global technology and political leaders, including Anthropic CEO Dario Amodei, Sundar Pichai of Google, and senior Indian business figures such as Mukesh Ambani and Nandan Nilekani. Political leaders including Emmanuel Macron, Sheikh Khaled bin Mohamed bin Zayed Al Nahyan, and Luiz Inácio Lula da Silva are also expected to attend, spotlighting India’s ambition to position itself as a central player in global AI debates.

For global AI firms, including OpenAI, the summit underscores how India’s vast user base is translating into growing influence over how the technology evolves.

OpenAI did not respond to a request for comment.

• Google has made a small but useful tweak to Android Auto
• Driving status can now be ascertained via Bluetooth
• This reduces the chances of mistakenly muting notifications

If you’re a regular Android Auto user, you may have noticed that there are a rather complicated set of rules around notifications being automatically blocked while you’re driving – but it seems Google has now sorted out one of the most frustrating issues.

As spotted by Android Authority, the option to have Do Not Disturb automatically enabled in Android Auto when motion is detected seems to have been tweaked. This setting was known for accidentally muting alerts on the phones of passengers as well as drivers.