Muse Mac AI agent has 0-day flaws that turn it into 'the ultimate backdoor', researcher warns
nptacek · x · 2026-09-22
macOS security researcher Patrick Wardle warns users not to install Muse, a newly launched personal AI agent for Mac designed to manage your digital life around the clock. Because Muse requires broad system access, Wardle says serious 0-day vulnerabilities allow local malware or attackers to invisibly hijack it into "the ultimate backdoor" — and he demonstrates the attack in a thread. It's a stark reminder of the attack surface that high-privilege AI agents introduce.
More from Safety
- Pause AI movement holds first DC protest with ~50 attendees, researcher David Krueger speaks — DavidSKrueger · 2026-09-22
- NYT editorial invokes nuclear analogy: society can restrain dangerous innovations like AI — zetalyrae · 2026-09-22
- Grok 4.7 posts 59% recall on defensive cyber bench at half the cost of rivals — andreamichi · 2026-09-22
- GitHub Actions + Rust's Miri can leak your CI secrets; GPT-6 Astra helped find it — charliermarsh · 2026-09-22
- 22 countries call for frontier AI controls, still pushing standards and evals — DavidSKrueger · 2026-09-22
- Paper: 26 malicious LLM routers inject tool calls, steal keys, drain $500k — petrusenko_max · 2026-09-22