Midjourney made its name by turning text prompts into stunning AI images. Now it wants to scan your body while you stand in warm water. Yes, really.

The company has announced Midjourney Medical, a new division focused on a full-body ultrasound scanner. Midjourney says the goal is to make body scans faster, cheaper and easier to get.

The basic idea is this. You step onto a platform in a shallow pool. Then the platform slowly lowers you through water while underwater sensors send sound waves through your body. The system listens for how those waves bounce back and change. From there, computers build a 3D map of what is happening inside your body.

Midjourney says the scan could take about 60 seconds. No radiation. No powerful magnets. Just water, sound and a huge amount of computing power. That sounds amazing. It also raises a big question: Can a company known for AI art really help change medical imaging?

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
• Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

YOUR HEALTH APP MAY BE FAILING YOU

What is the Midjourney body scanner?

Midjourney describes its body scanner as a water-based full-body ultrasound system. The company calls the technology “Ultrasonic CT.” Instead of lying inside a hospital scanner, you would step into a shallow pool. Then a platform would lower you through a ring of ultrasound sensors.

Those sensors send sound waves through your body from many angles. The system studies how those waves change as they pass through tissue. Then, powerful computers turn that information into a detailed body map.

Midjourney says its first scanner will focus on body composition maps. That could include details about muscle, fat and other body structures. That part is important because body composition fits more clearly into a wellness starting point. Diagnostic medical uses would require regulatory clearance.

How the Midjourney body scanner works

The scanner starts with water because ultrasound travels well through it. You stand on a platform connected to rails. Then the platform slowly lowers you at about 2 inches per second. As your body moves downward, it passes through a ring of tiny sensor elements. Midjourney describes those elements as both tiny speakers and tiny microphones.

Each one sends ultrasonic sound waves into the water and your body. Then it records what comes back. Think of it as echolocation with extreme detail. A dolphin uses sound to understand what sits nearby. This scanner uses sound from many angles to build an image of your body.

Midjourney says the system produces a massive amount of data every second. That data then moves to a large computer cluster, where the system turns sound-wave changes into images. Those changes reveal important differences.

Sound moves through skin, fat, muscle, bone and other tissue in different ways. The scanner studies those shifts and uses them to reconstruct a 3D map.

Why Midjourney built a medical scanner

At first, this move feels strange. Midjourney is the company people know for AI images, not medical hardware. But the technical connection makes sense. This scanner needs huge amounts of computing power. It also needs advanced image reconstruction. Midjourney already works with large image systems and AI models.

The company also describes itself as a research lab. It says it has no investors and gets support from its community. That gives Midjourney room to chase ideas that look unusual from the outside. A water-based body scanner inside a spa definitely qualifies.

CHINA’S BRAIN CHIP BREAKTHROUGH RAISES BIG QUESTIONS

Why the Midjourney Spa matters

Midjourney wants the scanner to feel more like a spa visit than a medical appointment. Its first Midjourney Spa is planned for San Francisco at the end of 2027. The concept includes hot tubs, saunas, cold plunges and scanning rooms with pools of golden light.

That changes the whole feel of medical imaging. No cold hospital room. No loud MRI tube. No long appointment that wears you and me out.

Instead, the company wants people to get scans more often. In Midjourney’s view, you could track body changes over time, almost like you track sleep, steps or heart rate today.

Midjourney body scanner vs. MRI

Midjourney makes a bold comparison to MRI. The company says its scanner could create images that look similar to today’s MRI scans, but much faster.

MRI machines can show remarkable detail. Doctors use them for serious medical questions. They also require trained staff, approved protocols and careful interpretation.

Midjourney’s scanner has not replaced MRI machines. For now, the company plans to start with body composition maps. That still could be useful. A quick scan may help someone better understand changes in muscle, fat or other body measurements.

Yet medical diagnosis takes more than an impressive scan image. Doctors need proof. Regulators need data. Patients need clear answers about what the scan can find, what it can miss and what the results actually mean.

Why FDA clearance matters for the Midjourney body scanner

Medical imaging has a high bar for a reason. A scan can shape major health decisions. Midjourney says it plans to submit test results to the FDA for added capabilities. That process will help determine what the scanner can legally claim.

A wellness scan and a diagnostic scan serve different roles. A wellness scan may help you learn more about your body. A diagnostic scan may help guide treatment for a disease, injury or medical condition.

Each of these requires different evidence. They also carry different risks. For example, a scan might spot something unclear. That could send someone into follow-up tests, specialist visits and weeks of worry.

On the other hand, a scan might miss something important and give someone false confidence. That is why doctors will want strong clinical data before they trust this technology for serious medical decisions.

What to watch next for the Midjourney body scanner

The big thing to watch is proof. The scanner may look impressive, but medical claims need strong testing behind them.

FDA clearance will be another key step. If Midjourney wants this to do more than body composition maps, regulators will need to see solid data.

The first San Francisco spa will also tell us a lot. Once people actually use it, we will learn more about comfort, cost, safety and privacy.

Doctors will have the final say in whether this becomes a trusted medical tool. If the science holds up, this could be a huge shift. If it does not, it may stay more of a high-tech wellness experience.

What this means for you

If the Midjourney body scanner works, it could make health scans feel much less intimidating. That alone could be a big deal. Many people avoid scans because they cost too much, take too long or feel stressful.

A 60-second water-based scan could lower that barrier. It could also help people track changes in their bodies over time.

Privacy also needs serious attention. A full-body scan contains deeply personal information. Before anyone signs up, they should know who stores the data, who can see it, how long it lasts and whether it can be shared.

For now, treat this as a fascinating early project. Do not treat it as a replacement for medical imaging that your doctor orders.

Watch the CyberGuy Live replay: Lock Down Your Phone in 30 Minutes

Your phone holds your email, passwords, photos, banking apps and personal data. In this free CyberGuy Live replay, Kurt the CyberGuy walks you step by step through simple phone security fixes you can do at your own pace. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Watch the replay and get our checklist here:CyberGuyLive.com

Kurt’s key takeaways

Midjourney’s body scanner is one of the wildest health tech ideas I’ve seen in a long time. You step into warm water, get lowered through ultrasound sensors and come out with a body map in about a minute. That could make scans feel a lot less stressful. It could also help people track changes in their bodies over time. However, this still needs proof. Midjourney needs clinical data, FDA clearance for medical uses and clear privacy rules before anyone treats this like a trusted medical tool. I love the big idea. I just want the science, safety and privacy to be as impressive as the technology.

Would you step into a water-based body scanner at a spa if it promised to show you what is happening inside your body? Let us know by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
• Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com. All rights reserved.

I’m sure we’re all familiar with Dark Crystal, so we know that Jim Henson can be weird and tackle slightly more mature subject matter. But there is little in his oeuvre that is quite as mind-bending as the Muppetless The Cube. This 1969 teleplay was produced for an NBC anthology series called Experiment in Television, which featured, appropriately enough, various experimental films, plays, and documentaries. One episode even featured Marshall McLuhan explaining his oft-cited theory that “the medium is the message.”

Even among all these oddities, however, Jim Henson’s The Cube stands out. It’s a 53-minute bottle film — taking place almost entirely in a single room. A man awakes in a white cube, unsure of where he is or how he got there. There are no windows, no door. Just walls of white panels.

It doesn’t take long for someone to open a section of the wall and bring in a stool for our nameless man in the cube. But when he closes the “door” behind him, our protagonist can’t open it back up. And thus begins the parade of people, dozens of them, taking turns going in and out of various invisible doors in the titular cube.

The interactions start off strangely enough — why is there strawberry jam on the stool? Who is this woman who claims to be the protagonist’s wife even though he doesn’t recognize her? But they quickly escalate, calling into question the nature of reality, our protagonist’s sanity, and raising questions about what the cube is exactly. Jim Henson himself even makes an uncredited cameo as the voice of a gorilla in a tutu.

As people come and go, delivering supplies to the man, harassing him, or even attempting to seduce him, the room changes around him inexplicably. Beds, couches, fully stocked liquor cabinets, and other furniture mysteriously appear. A full band slips in and sings a song with the line “you’ll never get out ‘til you’re dead,” before it’s revealed to be a recording as the record skips repeatedly on the word “dead.”

The Cube offers many questions but no answers. Is the man living in a simulation? Is he on TV? Are the people around him actors? Is any of it real at all? Does matter exist?

Even in a post-Twilight Zone world, The Cube feels uniquely bizarre, more akin to the modern dystopian anthology series Black Mirror than anything else. While it’s not true lost media, it remains relatively obscure. It only aired twice, there’s a sold-out DVD listing on Amazon, and it only occasionally makes an appearance on streaming services in any official capacity.

Your best bets right now are a pair of YouTube uploads, both embedded above. One is a much higher-quality transfer of a black-and-white kinescope film with remastered audio. Unfortunately, it also cuts out most of the song due to copyright. The other upload is full color and retains the song, but is a generally lower quality rip with muddier image and audio. Regardless of which one you choose, it’s a wild and thoroughly enjoyable ride that shows just how twisted the mind of Jim Henson could be.

The security step many of us trust most may not protect us the way we think. The FBI is warning about an emerging phishing-as-a-service platform called Kali365. It targets Microsoft 365 accounts, including Outlook, Teams and OneDrive.

That alone sounds bad. The scarier part is how it works. This scam can get into your account without stealing your password. Even with multifactor authentication turned on, one wrong device-code approval could give a criminal access.

Here’s how the scam works, why it can slip past MFA and what you can do to protect your Microsoft account.

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
• Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

NEW FBI WARNING REVEALS PHISHING ATTACKS HITTING PRIVATE CHATS

How Kali365 tricks Microsoft users

Kali365 is a phishing-as-a-service platform. In other words, crooks can subscribe to it and use ready-made tools to attack Microsoft 365 accounts. The FBI says Kali365 was first seen in April 2026 and has mainly spread through Telegram. The platform gives attackers access to AI-generated phishing messages, automated campaign templates, tracking dashboards and tools that capture OAuth tokens. That last part is the key.

OAuth tokens are digital access keys. They can let an app stay connected to your Microsoft account without asking for your password every time. They are useful when the right app uses them. They are dangerous when a scammer steals them.

Why this scam can beat MFA

Most phishing scams try to steal your password. Kali365 takes a different route. The attack abuses Microsoft’s device code login process. You may have seen something similar when signing into a streaming app on a smart TV. A screen shows a short code. Then you enter that code on another device to approve the sign-in.

That process is legitimate. The scam begins when a criminal starts the sign-in from their own device and tricks you into approving it. You may see a phishing email that looks like it came from a trusted cloud service or document-sharing tool. The message includes a code and tells you to visit a real Microsoft verification page.

That real Microsoft page is what makes this so sneaky. The web address can look right. Your password manager may not object. The page may feel safe. But once the code gets entered, you may unknowingly authorize the attacker’s device. From there, the attacker can capture access and refresh tokens. That can open the door to Outlook, Teams and OneDrive without your password or another MFA prompt.

QR CODE EMAIL SCAM TARGETS EMPLOYEE REVIEWS

Why this should worry small businesses too

A scam like this can hit anyone with Microsoft 365 access. Still, small businesses should pay close attention. Think about what sits inside a typical work account. Email threads. Invoices. Shared files. Employee chats. Vendor contacts. Customer details. Calendar invites. One compromised account can give a criminal a very believable voice.

A scammer who gets into Outlook can study how you write. They can send messages from your real account. They can ask coworkers to pay fake invoices, share files or reset passwords. That to me is scary because the scam may not look like a scam anymore. It may come from someone you know.

How the attack unfolds

The FBI describes the scheme in a clear sequence. First, the victim gets a phishing email that pretends to come from a trusted productivity or file-sharing service. Next, the email provides a device code and tells the victim to enter it on a legitimate Microsoft verification page.

Then, the victim enters the code and unknowingly approves the attacker’s device. After that, the attacker captures OAuth access and refresh tokens. Finally, the attacker can access Microsoft 365 services such as Outlook, Teams and OneDrive without needing the victim’s password.

Red flags to watch for

The biggest warning sign is an unexpected request to enter a Microsoft device code. Be suspicious if an email tells you to enter a code for a file, voicemail, invoice or shared document you did not request.

Also, watch for urgency. Scammers love messages that push you to act fast. They may claim a document will expire, a voicemail is waiting, or an account needs verification.

Another clue is context. If you were not trying to sign in to a device, do not enter a device code. That one habit can stop this scam before it starts.

What Microsoft says about the Kali365 phishing warning

In response to CyberGuy, Microsoft said customers should follow the FBI’s recommendations as well as Microsoft’s published best practices to protect against Kali365 and similar scams.

The company also said it works to disrupt cybercriminal ecosystems tied to phishing-as-a-service and account takeover activity. Microsoft pointed to recent Digital Crimes Unit actions involving Fake ONNX, RaccoonO365 and Tycoon 2FA as examples of those broader efforts.

How to protect your Microsoft 365 account from Kali365

A few smart habits can help you spot fake device-code requests, reduce your exposure and follow the FBI’s guidance for limiting this type of attack.

1) Never enter a device code you did not request

Only enter a Microsoft device code when you personally started the sign-in. If the code arrives through an email, Teams message or random document link, stop.

2) Go directly to Microsoft

Do not use links inside surprise messages. Open your browser and go directly to Microsoft or your company’s Microsoft 365 portal.

3) Check your account activity

Review recent sign-ins, connected devices and active sessions. If you see a location, device or app you do not recognize, take action right away.

4) Revoke suspicious sessions

If you think you entered a code by mistake, sign out of all sessions and revoke suspicious app access. Then change your password and contact your IT team.

5) Keep MFA turned on

Do not turn off multifactor authentication because of this scam. MFA still blocks many account attacks. This threat shows why you also need to be careful with approval prompts and device codes.

6) Use strong security software

Using strong antivirus software can help detect phishing pages, malicious links and suspicious downloads before they cause damage. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

7) Use a data removal service

Scammers often build convincing phishing messages with personal details found online. A data removal service can help reduce the amount of your information available on people-search sites and data broker databases. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

8) Train your team on device-code scams

Employees may know not to type passwords into strange pages. Many have never been warned about device codes. Make this specific scam part of your security training.

9) Restrict device code flow if your business does not need it

The FBI says restricting device code flow can help prevent or limit this style of attack. IT teams should create a conditional access policy to block device code flow for all users, with limited exceptions for required business processes.

10) Audit device code usage first

Before blocking device code flow, the FBI recommends auditing current usage to identify legitimate business needs. That can help prevent disruptions for employees or systems that rely on this sign-in method.

11) Block authentication transfer policies

The FBI also recommends blocking authentication transfer policies. This can help prevent users from transferring authentication from computers to mobile devices.

12) Protect emergency access accounts

If your organization cannot fully restrict device code flow, the FBI recommends excluding emergency access accounts to prevent lockouts. That step should be handled carefully by your IT or security team.

13) Report the attack

If you were targeted or compromised, report it to the FBI’s Internet Crime Complaint Center at IC3.gov. Include phishing emails, email headers, suspicious login times, IP addresses, locations, unauthorized devices and active sessions.

What to do if you have already entered a code

Move quickly.

• Sign out of Microsoft 365 on all devices.
• Change your password.
• Check your recovery email and phone number.
• Review forwarding rules in Outlook.
• Look for strange inbox rules that hide, delete or redirect emails.
• Then review OneDrive files, Teams messages and recent account activity.
• If this is a work account, tell your IT team immediately. Do not wait to see what happens. Stolen tokens can give attackers continued access until they are revoked.

Kurt’s key takeaways

This is the kind of scam that can fool smart people because it uses a real Microsoft sign-in page to pull off something criminal. That is what makes Kali365 so dangerous. It can turn a trusted security step into a trap, especially when the code did not come from a signed-in user. The big takeaway here is to slow down before entering any Microsoft device code. If a code shows up through an unexpected email, text or Teams message, stop and go directly to the account instead. Do not approve a sign-in unless it was started on purpose. A few extra seconds of caution can help keep criminals out of Outlook, Teams, OneDrive and everything connected to them.

Have you ever received a Microsoft code or login prompt you did not request, and did it look convincing enough to make you pause? Let us know by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
• Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com. All rights reserved.