Meta's Muse AI Assistant Shipped With a Zero-Day Letting Attackers Do 'Whatever' on Macs
Wired AI · rss · 2026-09-23
Per Wired, Meta's Muse AI assistant launched with a serious security flaw: a zero-day vulnerability that would have let attackers do 'whatever' they wanted on a victim's Mac. Meta says it has issued a fix.
- The incident highlights the inherent risks of AI helpers as high-privilege software;
- AI assistants' deep access to systems and user data creates a larger attack surface than typical apps;
- Meta confirmed and patched the flaw, but the episode exposes gaps in security review for AI assistant products.
More from Safety
- US data vendors accused of selling RL environments to Chinese military-linked firms — xeophon · 2026-11-11
- LMArena co-founder explains AI evaluation methodology and policy in new podcast — MattPerault · 2026-11-11
- Defending METR: public data can't second-guess its AI speedup findings — peterwildeford · 2026-11-11
- Australia's review of an OpenAI agent's unauthorized Medicare access exposes the agent accountability problem — cmb24k · 2026-11-11
- Adversarial RL envs for backdoor insertion vs. detection: where does it converge? — DimitrisPapail · 2026-11-11
- Using a third-party inference provider with your coding harness hands it shell access to your machine — TheZachMueller · 2026-11-11