Threat actors are evading phishing detection in campaigns targeting Microsoft accounts by abusing the no-code app-building platform Bubble to generate and host malicious web apps.

Because the web app is hosted on a legitimate platform, email security solutions do not flag the link as a potential threat, allowing users to access the page.

Security researchers at Kaspersky say that threat actors are using the new method to redirect users to the actual phishing page, which is often mimicking a Microsoft login portal that is sometimes hidden behind a Cloudflare check.

Any credentials entered on these fake web pages are siphoned to the phishing actor, who may then use them to access email, calendar, and other sensitive data associated with Microsoft 365 accounts.

Bubble is a no-code AI-powered platform where users describe the app they want to build and then the platform automatically generates the backend logic and frontend.

The resulting apps are hosted on Bubble’s infrastructure under *.bubble.io, which is a trusted domain unlikely to trigger security warnings from email security solutions.

Phishing actors take advantage of this by creating Bubble apps that consist of large, complex JavaScript bundles and Shadow DOM-heavy structures, which are not flagged as redirection scripts or classified as malicious by static and automated analysis tools.

“The code generated by this no-code platform is a massive jumble of JavaScript and isolated Shadow DOM (Document Object Model) structures,” explains Kaspersky.

“Even for an expert, it’s difficult to grasp what’s happening at first glance; you really have to dig through it to understand how it all works and what the purpose is.”

“Automated web-code analysis algorithms are even more likely to get tripped up, frequently reaching the verdict that this is just a functional, useful site.”

The researchers warn that the tactic of abusing AI-powered app builders for evasion in phishing campaigns is very likely to be adopted by phishing-as-a-service (PhaaS) platforms and integrated into phishing kits that are widely used by lower-tier cybercriminals.

These platforms already provide session cookie theft, adversary-in-the-middle (AiTM) layers that bypass two-factor authentication (2FA), geo-fencing, anti-analysis tricks, and AI-generated email content, so the abuse of legitimate platforms will only increase the stealth of these attacks.

BleepingComputer has contacted Bubble for a comment about Kaspersky’s findings and any plans to strengthen anti-abuse protections, but we have not received a response by publishing time.

Malware is getting smarter. The Red Report 2026 reveals how new threats use math to detect sandboxes and hide in plain sight.

Download our analysis of 1.1 million malicious samples to uncover the top 10 techniques and see if your security stack is blinded.

Advertisement

Download The Report

Today marks the start of the 2026 baseball season and in what has sort of become an annual tradition, T-Mobile is once again offering a free subscription to MLB.TV.

In order to take advantage of the deal, T-Mobile customers simply need to log into the T Life app, navigate to the Benefits tab and then hit Redeem after clicking the banner for a free season of MLB.TV. From there, you just need to download the latest version of the MLB app to your mobile device and sign in or create an account. That said, this is a time-limited offer, so if you want the ability to stream regular season baseball for free, you’ll need claim the deal prior to March 31 at 4:59 AM ET. For anyone on a different carrier, this may be enough time to switch providers and still get in on the savings.

Unfortunately, MLB.TV is subject to blackouts and market restrictions, so depending on where you live and where your favorite team is playing that day, you may not be able to catch every game. Sadly, this includes tonight’s 8:05 PM ET matchup between the New York Yankees and the San Francisco Giants, which is streaming exclusively on Netflix. Even so, with a one-year subscription to MLB.TV currently going for $150, this is one of the best perks available from any of the big cellular carriers.

In addition to full season of games, an MLB.TV subscription also includes access to a collection of baseball documentaries, game streams from previous years, World Series films, highlights, news and more. And with over 1.25 million customers having redeemed last year’s offer, this is potentially one of T-Mobile’s biggest offers of the year, with the company claiming to have delivered more than $1 billion in savings since it first started running the promotion 10 years ago in 2016.

Looking for the most recent Mini Crossword answer? Click here for today’s Mini Crossword hints, as well as our daily answers and hints for The New York Times Wordle, Strands, Connections and Connections: Sports Edition puzzles.

Baseball is back! You’ll see baseball images patterned throughout today’s Mini Crossword grid, and when you solve the puzzle, they’ll spell out a certain word. Play ball! Er, read on for all the answers. And if you could use some hints and guidance for daily solving, check out our Mini Crossword tips.

If you’re looking for today’s Wordle, Connections, Connections: Sports Edition and Strands answers, you can visit CNET’s NYT puzzle hints page.

Read more: Tips and Tricks for Solving The New York Times Mini Crossword

Let’s get to those Mini Crossword clues and answers.

Mini across clues and answers

1A clue: Degrees for boardroom execs
Answer: MBAS

5A clue: “___ want for Christmas …”
Answer: ALLI

6A clue: What Hamlet holds while giving his “Alas, poor Yorick!” speech
Answer: SKULL

7A clue: Wild, as an animal
Answer: FERAL

8A clue: Sphere
Answer: ORB

Mini down clues and answers

1D clue: Word after “match” or “mischief”
Answer: MAKER

2D clue: Bit of writing on a book jacket
Answer: BLURB

3D clue: Penne ___ vodka
Answer: ALLA

4D clue: Window ledge
Answer: SILL

6D clue: Bay Area airport, for short
Answer: SFO

Version 1 says it has chosen its new Dublin HQ for its ‘state-of-the-art AI Studio’ and will add 250 roles locally.

The new HQ at Four Park Place in Dublin will see it become neighbours to Apple when they officially open their new Dublin offices later this year, and sees the Irish technology provider reach a headcount of some 3,700 globally.

The Dublin jobs news follows an announcement earlier this month at the UK-Ireland Summit that it would create 1,000 jobs across the UK and Northern Ireland, as part of its plans to invest £40m into the UK market over the next few years.

Version 1 was founded in Dublin in 1996 and offers a range of technology services to global organisations. It has other key hubs in London, Edinburgh and Belfast, but has chosen Dublin for its AI studio as it focuses in on AI. At the summit, it said the majority of the 1,000 UK roles would also be AI-focused, and around 400 of the roles would be in Northern Ireland.

“This is more than an office opening. It is a statement of intent,” said Roop Singh, CEO of Version 1. “30 years ago, Version 1 was founded in Dublin with a commitment to making technology deliver extraordinary business outcomes and citizen welfare. That commitment has not changed, but the scale and ambition have.

“Our principal belief is that AI enhances human capability, it does not replace it. This studio is where we will prove that, working alongside our customers and communities to build AI solutions that are practical, governed and grounded in real business outcomes.”

“Version 1’s continued growth and investment in Ireland is a powerful example of an Irish company winning on the global stage,” said Kevin Sherry, executive director at Enterprise Ireland, which has worked closely with Version 1 to support international growth. “The opening of this AI Studio positions Ireland as a serious centre for AI innovation and reinforces our ability to develop and retain world-class technology talent.

“Ambitious companies like Version 1 embody Enterprise Ireland’s mission that Irish-owned, globally-focused companies will be the primary driver of our economy,” he added.

Version 1 says the AI Studio has been designed as a space to “harness the power of technology by co-creating solutions to complex problems alongside customers from all sectors”, and added that it will be available to schools, universities and community groups in an effort to “democratise” technology. Version 1 says AI must “carry a social licence and be developed responsibly”.

The opening was attended by Minister for Enterprise, Tourism and Employment Peter Burke, TD who described Version 1 as “a blueprint for how Ireland creates, retains and scales world-class technology companies”.

“This new headquarters represents significant inward investment in Ireland’s economy and talent base and cements our position as a premier hub for AI and business transformation services at a time when nations are competing for AI leadership,” he said.

Minister of State for Trade Promotion, Artificial Intelligence and Digital Transformation Niamh Smyth, TD also attended the launch and said it was Ireland’s ambition to be “at the forefront of responsible AI adoption”.

“Version 1’s new AI Studio demonstrates what is possible when Irish enterprise combines deep technical expertise with a genuine commitment to community partnership and skills development,” she said.

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

The excitement is building with NASA now just a few days away from sending four astronauts on a voyage around the moon.

On Wednesday, the space agency shared its schedule for coverage of the final buildup and main event, including a Q&A with the astronauts this Friday, blast off on Wednesday, April 1, and regular updates as the crew make their way to the moon.

Americans Reid Wiseman, Victor Glover, and Christina Koch, together with Canadian Jeremy Hansen, will leave the launchpad aboard an Orion spacecraft carried skyward by NASA’s massive Space Launch System (SLS) rocket.

They’ll spend several days in Earth orbit checking the spacecraft’s systems before heading toward the moon. They won’t land on the lunar surface, but instead fly around it on a journey that will take humans farther from Earth than at any time since the Apollo era more than five decades ago.

Below is a summary of the events linked to the upcoming Artemis II mission. All times are Eastern Time (ET):

Friday, March 27

2:30 p.m.: The Artemis II crew will arrive at the Kennedy Space Center for a Q&A session with the press. NASA chief Jared Isaacman will also be in attendance, along with CSA (Canadian Space Agency) president Lisa Campbell.

Sunday, March 29

9:30 a.m.: The Artemis II crew will spend some time answering additional media questions, but this time virtually, from their quarantine facility.

2 p.m.: NASA officials linked to the mission will hold a status update on preparations for the Artemis II launch.

Monday, March 30

5 p.m.: Following a key mission meeting, NASA will host a news conference to provide a status update on preparations for launch.

Tuesday, March 31

1 p.m.: The space agency will hold a prelaunch news conference on the countdown status.

Wednesday, April 1

7:45 a.m.: Coverage begins on NASA+ of the tanking operations to load propellant into the SLS rocket. The livestream will include various views of the rocket and commentator analysis.

12:50 p.m.: NASA+ begins the official livestream for the much-anticipated launch, which is targeted for no earlier than 6:24 p.m. Following liftoff, coverage will continue on YouTube after Orion’s solar array wings deploy in space.

Around two-and-a-half hours after launch, and after the SLS rocket’s upper stage has performed a burn to send Orion and its crew to high-Earth orbit, NASA will hold a news conference to offer an update on the mission. The start time could change, depending on the precise liftoff time. In fact, the entire schedule could change, according to how the final preparations proceed. NASA will post any developments on its X account.

For information on the timing of daily updates during the mission, including live link-ups with the crew, check out NASA’s full schedule.

Okay, so the U.S. and China are locked in an all-out race to build the most powerful AI on the planet. Beijing is throwing billions at homegrown models, tightening its grip on the tech sector, and watching nervously as its best AI talent gravitates to U.S. companies. A Carnegie Endowment study published late last year found that 87 of the 100 top Chinese AI researchers at U.S. institutions in 2019 are still there.

Yet Manus — one of China’s most buzzed-about AI startups — quietly relocated to Singapore and sold itself to Meta for $2 billion. Did anyone think there would not be a reckoning over this tie-up?

As industry watchers know, Manus burst onto the scene in the spring of last year with a demo video showing an AI agent screening job candidates, planning vacations, and analyzing stock portfolios, and it cheekily claimed it outperformed OpenAI’s Deep Research. Within weeks, Benchmark — the consummate Silicon Valley venture firm — led a $75 million funding round at a $500 million valuation. That was surprising. (Senator John Cornyn had thoughts, tweeting at the time, “Who thinks it is a good idea for American investors to subsidize our biggest adversary in AI, only to have the CCP use that technology to challenge us economically and militarily? Not me.”)

By December, Manus had millions of users and was pulling in over $100 million in annual recurring revenue. Then Meta came calling, and Mark Zuckerberg, who has staked the company’s future on AI, snapped it up for $2 billion.

It’s worth noting that Manus didn’t just sell itself to an American buyer; it spent the better part of last year actively trying to operate outside China’s orbit. The company relocated its headquarters and core team from Beijing to Singapore, restructured its ownership, and after the Meta deal was announced, Meta pledged to cut all ties with Manus’s Chinese investors and shut down its operations in China entirely. By every measure, Manus was trying to make itself a Singapore company.

But if that string of events raised eyebrows in Washington, you can only imagine that in Beijing, they were apoplectic.

China has a phrase for all of this: “selling young crops” — homegrown AI companies that move abroad and sell themselves to foreign buyers before they’ve fully matured, taking their intellectual property and talent with them.

Beijing hates it and has spent years establishing that no company operates outside its reach. Surely, we all remember that time Jack Ma gave a speech in 2020, mildly criticizing Chinese regulators, after which he disappeared from public life for months, Ant Group’s blockbuster IPO was killed overnight, and Alibaba was handed a $2.8 billion fine. China then spent the next two years methodically dismantling its own booming tech sector, wiping out hundreds of billions in market value. Chinese leaders are many things, but subtle is not one of them.

Which is why it wasn’t entirely surprising when, on Tuesday, the Financial Times reported that Manus co-founders Xiao Hong and Ji Yichao were summoned to a meeting this month with China’s National Development and Reform Commission and told that they wouldn’t be leaving the country for a while. No formal charges have been filed — just an inquiry into whether the Meta deal violated Beijing’s foreign investment rules.

Beijing is calling it a routine regulatory review.

At some point, someone at Manus probably thought they’d gotten away with it, and maybe they still will. But given the stakes of the AI race, that was always a big gamble. Now Beijing wants answers; Manus’s founders are apparently not going anywhere until it gets them.

GitHub is adopting AI-based scanning for its Code Security tool to expand vulnerability detections beyond the CodeQL static analysis and cover more languages and frameworks.

The developer collaboration platform says that the move is meant to uncover security issues “in areas that are difficult to support with traditional static analysis alone.”

CodeQL will continue to provide deep semantic analysis for supported languages, while AI detections will provide broader coverage for Shell/Bash, Dockerfiles, Terraform, PHP, and other ecosystems.

The new hybrid model is expected to enter public preview in early Q2 2026, possibly as soon as next month.

Finding bugs before they bite

GitHub Code Security is a set of application security tools integrated directly into GitHub repositories and workflows.

It is available for free (with limitations) for all public repositories. However, paying users can access the full set of features for private/internal repositories as part of the GitHub Advanced Security (GHAS) add-on suite.

It offers code scanning for known vulnerabilities, dependency scanning to pinpoint vulnerable open-source libraries, secrets scanning to uncover leaked credentials on public assets, and provides security alerts with Copilot-powered remediation suggestions.

The security tools operate at the pull request level, with the platform selecting the appropriate tool (CodeQL or AI) for each case, so any issues are caught before merging the potentially problematic code.

If any issues, such as weak cryptography, misconfigurations, or insecure SQL, are detected, those are presented directly in the pull request.

GitHub’s internal testing showed that the system processed over 170,000 findings over 30 days, resulting in 80% positive developer feedback, and indicating that the flagged issues were valid.

These results showed “strong coverage” of the target ecosystems that had not been sufficiently scrutinized before.

GitHub also highlights the importance of Copilot Autofix, which suggests solutions for the problems detected through GitHub Code Security.

Stats from 2025 comprising over 460,000 security alerts handled by Autofix show that resolution was reached in 0.66 hours on average, compared to 1.29 hours when Autofix wasn’t used.

GitHub’s adoption of AI-powered vulnerability detection marks a broader shift where security is becoming AI-augmented and also natively embedded within the development workflow itself.

Malware is getting smarter. The Red Report 2026 reveals how new threats use math to detect sandboxes and hide in plain sight.

Download our analysis of 1.1 million malicious samples to uncover the top 10 techniques and see if your security stack is blinded.

Download The Report

Photo credit: WSJ
Few pieces of furniture have earned a place in both design history and everyday luxury quite like the Eames Lounge Chair. The Wall Street Journal recently got a rare look inside the MillerKnoll factory in Zeeland, Michigan, where every authentic example is still assembled by hand, walking the production floor from raw wood all the way through to finished chair and making it very clear why each one carries a price tag somewhere between five and ten thousand dollars.

It starts with thin sheets of veneer cut from sustainably grown walnut or cherry. Workers layer seven of them together with glue, alternating the grain direction with each sheet before a hydraulic press applies heat and pressure until the wood begins to take on the chair’s distinctive curves, forming the seat, back, and headrest that make the design instantly recognizable. Once cooled, the molded pieces move to a computer guided cutter that trims everything to the correct dimensions. Because the wood itself dictates the final appearance, no two chairs ever come out looking exactly the same.

Sale

CHITA Genuine Leather Reclining Swivel Chair with Adjustable Headrest and Ottoman for Living Room, Black

• Reclining Swivel Chair and Ottoman: This chair and ottoman set is just right for a modern office, den, or living room. A recline feature makes this…
• Memory Swivel Base & Adjustable Headrest: Stable 4-prong metal base features memory return that spins back to your original position after you get up…
• 100% Top Grain Leather: The finest hide portion, extremely durable for high-use chairs, adding sophistication to any room. Over time, it molds to your…

Every edge is then hand sanded, with workers running their fingertips along each surface to catch anything the machines might have missed. A coat of linseed oil goes on next, brushed in and left to soak, protecting the wood and deepening its color gradually over time. While that is happening, the metal components are being prepared, polished aluminum spines and bases that are as refined as anything else on the chair. The hardwood shells are then fastened to the frames with small spacers that keep everything locked in place and silent. It is a lengthy process by design, because a single misaligned hole or loose screw is enough to throw the whole thing off balance.

Upholstery takes place in a different area of the plant, where leather hides are pre-selected for uniform thickness and color before being dispatched to the cutting stations. Workers lay out patterns on each hide and cut them by hand using sharp knives, after which stitchers wrap and sew the covers around cushions filled with down and foam. The leather is pushed taut to flow smoothly over the chair’s curves with no creases. Each final cushion hooks onto its plywood shell using hidden fasteners, allowing owners to replace the covers decades later if necessary.

Quality control is strict, with each chair passing through a separate testing lab where Kyle Wright spends his days attempting to break them. In just a few hours, one machine rotates the base a hundred thousand times, replicating a decade of daily use. Another device presses down on the seat and back with weights that simulate the load of a big person shifting about after years of frequent use. If anything creaks, loosens, or gives way, the entire batch is returned to the factory floor for repairs. Only the chairs that pass all tests receive the little Herman Miller emblem sewn discreetly inside.
[Source]

Reports suggest Disney’s $1bn equity investment into OpenAI will not progress.

OpenAI is shutting down its controversial AI video generator Sora just months after announcing a multi-year licensing deal with Disney. The company told the BBC that the discontinuation will enable it to focus on other developments, such as robotics “that will help people solve real-world, physical tasks”.

Details on the timeline of the app’s shutdown, API and data preservation will be shared soon, OpenAI’s Sora team said in a post on X. “To everyone who created with Sora, shared it, and built community around it – thank you. What you made with Sora mattered, and we know this news is disappointing,” the post read.

The BBC further reported that following Sora’s closure, OpenAI will no longer focus on video-generation tools.

Video models such as Sora, its later iteration Sora 2 – which came with a social media app to share the AI content – as well as more recent ones such as ByteDance’s Seedance 2.0 have garnered strong criticism from artists and publishers who oppose to their copyrighted material being used to generate AI videos.

Prior to Sora’s launch in late 2024, protesting artists reportedly leaked the model on Hugging Face, claiming they were “lured” by OpenAI into “’art washing’ to tell the world that Sora is a useful tool for artists”.

Meanwhile, Disney’s three-year partnership and licensing deal with OpenAI came after the company reportedly opted out of allowing its copyrighted material from being used by Sora.

The deal, announced in December 2025, gave OpenAI access to more than 200 Disney characters to be used by Sora and ChatGPT Images. Alongside the licensing agreement, Disney also agreed to make a $1bn equity investment in OpenAI. The investment has reportedly been scrapped.

“We respect OpenAI’s decision to exit the video generation business and to shift its priorities elsewhere,” a Disney spokesperson told news outlets.

“We appreciate the constructive collaboration between our teams and what we learned from it, and we will continue to engage with AI platforms to find new ways to meet fans where they are while responsibly embracing new technologies that respect IP and the rights of creators.”

With Sora’s closure, OpenAI is seemingly shifting priorities towards AI tools suited for enterprise use, a sector where Anthropic is capturing a majority of newcomers. Meanwhile, Claude also overtook ChatGPT as the most downloaded app in the US last month.

To compete, OpenAI is building a new desktop ‘superapp’ by fusing together ChatGPT, Codex – the company’s coding tool – and Atlas, an AI-powered web browser launched last October.

“Sora was a resource black hole with strong compute costs and limited monetisation. The platform also struggled to prevent the creation of non-consensual imagery and realistic misinformation, not to mention major copyright infringement,” commented Forrester’s VP principal analyst Thomas Husson.

“In the context of its upcoming IPO, OpenAI likely decided to minimise the associated risks and prioritise profits and enterprise tools over experimental social apps, despite some consumer interest.

“Sora may be repurposed for some robotics and physical applications, but it is still very early days. At the end of the day, it highlights that OpenAI is still very far away from recouping its huge investments.”

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.