60
Introducing Muse: The World’s First Personal AI Agent Built for Everyone
Meta launches Muse, a personal AI agent running in a dedicated Secure VM and powered by its Muse Spark model, with payments via Stripe Link.
Meta introduced Muse, a consumer-facing personal AI agent that plans and executes tasks such as sending email, booking travel, browsing and negotiating, accessible via the Muse app and WhatsApp. The agent runs inside Muse Secure VM, a dedicated virtual machine with a separate Sentinel agent that gates all internet actions, and is powered by Muse Spark, described as Meta's most capable model to date. Muse integrates Stripe Link for agent payments with one-time-use cards and purchase protections, with 1Password support and Shop Pay planned. It rolls out in the US on iOS, Android and muse.ai, free for most features with subscription tiers, and a user-key-encrypted Muse Confidential VM is promised later in the year.
78
60
60
60
60
60
Meta Launches Personal AI Agent, Muse, Emphasizes Safety and Privacy
Meta launches Muse, a personal AI agent for US adults that executes tasks like emailing, travel booking, and turning long-term goals into plans.
Meta launched Muse on Tuesday, a personal AI agent for users 18 and over, initially available only in the US through a dedicated app and WhatsApp. The agent runs in a dedicated secure virtual machine that houses both the agent and the user's data, and can send emails, book travel, open a browser, fill out forms, and negotiate on the user's behalf. The launch aligns with Mark Zuckerberg's stated vision of AI superintelligence available to everyone, outlined in a recent 6,500-word essay.
65
Meta Releases Muse, a Personal AI Agent With Privacy ‘Built Into It’
Meta launched Muse, a personal AI agent on iOS, Android, WhatsApp, and web, with VM-isolated execution and prompt-injection protections.
Meta released Muse, a personal AI agent from Meta Superintelligence Labs that automates tasks such as sending email, booking travel, and making purchases, accessible via a dedicated app, Muse.ai, and WhatsApp. The agent runs in a Secure VM architecture that isolates untrusted web and integration data from the action-taking component, with a Sentinel system that routes human-in-the-loop approval prompts directly to users to resist prompt injection. Purchases use Stripe's Link single-use card numbers with no-fee return protections, and a future Confidential VM co-developed with Moxie Marlinspike will run in trusted execution environments with user-held keys. Meta added Muse to its public bug bounty with payouts up to $300,000, including up to $130,000 for single-user prompt injection findings.
75
60
60
60
60
60
60
60
60
60
60
Meta Introduces Muse, a Personal AI Agent That Runs on Its Own Dedicated Secure Cloud Computer
Meta launched Muse, a proactive personal AI agent running in an isolated per-user cloud VM with a Sentinel approval agent and surrogate credentials.
Meta introduced Muse, a consumer agent that performs long-horizon tasks like email, travel booking, and bill negotiation, rolling out in the US on iOS, Android, muse.ai, and WhatsApp with free and paid tiers. Each user gets a dedicated Muse Secure VM where the agent runs in a systemd-nspawn cell, while a separate Sentinel agent approves every network request at layer 4/7 and injects real credentials only at the network boundary. The underlying Muse Spark 1.3 model, which Meta says cuts tool calls by ~20% and tokens by ~25% versus 1.2 and is near state-of-the-art on prompt-injection resistance, is available via Meta Model API, with open weights on the roadmap.
72
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
Google and Mandiant attribute vishing-based SaaS data extortion attacks to UNC6671, now operating under the Redact, Pink, Helix, and Falcon brands.
Google Threat Intelligence Group and Mandiant track extortion group UNC6671, which uses vishing calls impersonating IT help desks to lure employees to adversary-in-the-middle phishing pages that capture credentials, MFA tokens, and session tokens. The group then registers adversary-controlled MFA devices, pivots through identity providers into Microsoft 365, Okta, and other SaaS applications, and runs automated Python and PowerShell exfiltration scripts. UNC6671 has rotated through extortion brands including BlackFile, Redact, Pink, Helix, and Falcon, and Google tracked over $10.6 million in Bitcoin payments between January 7 and May 12, 2026, with initial demands exceeding $3 million. The actor has hit dozens of organizations in North America, Australia, and the UK, shifting toward high-value financial and legal firms in July 2026.
78
Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps
Varonis discloses CoSnitch (CVE-2026-24301), three Microsoft Copilot Personal flaws enabling one-click exfiltration of connected-app data; patched August 18, 2026.
Varonis Threat Labs found that an undocumented autorun=1 parameter, paired with the q parameter, lets an attacker-supplied prompt run automatically on page load in a victim's authenticated Copilot session, then exfiltrate data from connected services such as mail, calendar, Google Drive, chat history and the memory store via Copilot's built-in URL fetch to an attacker webhook. A separate memory-poisoning path through web summarization lets a crafted page persist attacker instructions in the user's memory, surviving password changes, session revocation and device re-enrollment. Microsoft shipped patches on August 18, 2026, tracked as CVE-2026-24301, and Varonis found no evidence of in-the-wild exploitation. The flaws were found via 'meta-hacking', asking Copilot itself to reveal the autorun parameter and its protections.
66
60
60