Meta patches Muse zero-day that let attackers hijack the AI agent
The Verge AI · rss · 2026-09-22
- Meta has patched a zero-day vulnerability in its macOS Muse app that could let attackers take control of the AI agent, discovered by researcher Patrick Wardle.
- The flaw abused an undocumented Muse setting: attackers running local code could redirect transcription processing from Meta's servers to their own endpoint, gaining access to the victim's Muse account.
- Design decisions enabling the bug included cloud-based dictation instead of on-device processing, and allowing any app to control all of Muse's undocumented settings. Local device access was required.
More from Safety
- Spinning up containers for 20-line agent tools is backwards: Safescript compiles provable, 50ms-deploy apps — uriwa · 2026-11-12
- AI Analysis of 42 Jensen Huang Podcasts Tracks Shift on China and Chip Controls — ShakeelHashim · 2026-11-12
- Small AI sites under 20 MW mostly skip the permitting fights battering big data centers — antavedissian · 2026-11-12
- Newsweek op-ed: US should fund hospitals and universities in federated AI learning — Saul_Loveman · 2026-11-12
- Ron Bodkin: automated research taste advances faster than expected, but the evidence is weak — ronbodkin · 2026-11-11
- DEF CON panel with Bruce Schneier and Google security VP posted: scaling laws and open weights — JasonDClinton · 2026-11-11