Meta's Muse AI assistant hit by zero-day letting local apps hijack the agent
Astral Codex Ten · rss · 2026-09-22
Ars Technica reports a zero-day vulnerability in Meta's new macOS AI assistant Muse that gives locally run apps and terminal commands complete control of the agent, undercutting Zuckerberg's claim that it was "built from the ground up for privacy and security." Muse books appointments, fills forms, makes purchases and creates tools on the fly, requiring broad access to WhatsApp, email, calendars, files, mic, camera and location — undoing Apple's default OS protections. Notably there's no Windows version, and Amazon began blocking Muse from its site on Sunday.
More from Companies & People
- VentureTwins maps the B2A economy: dozens of agent infra and app companies in first series installment — venturetwins · 2026-11-12
- How DoorDash's GenAI platform team lets engineers build with AI quickly and safely — charles_irl · 2026-11-12
- Databricks launches autonomous AI coworker Genie: 91% on enterprise tasks with half the tokens — Yuchenj_UW · 2026-11-12
- Anthropic Lead SWE makes ~10x a GS-13's pay — called a national security blunder — harris_edouard · 2026-11-12
- a16z podcast: Mike Volpi on Cisco's 70+ acquisition playbook and the AI buildout — a16z · 2026-11-12
- Is Jensen Huang's bad behavior more commonplace than it seems? TechCrunch investigates — TechCrunch AI · 2026-11-12