Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw
Zero-day in Meta's Muse macOS AI assistant let any local app redirect transcription and steal account-control tokens; Meta released a hotfix.
Stories per day · 30 days
1 RSS
4 stories, newest first · one card per story
Stories tagged #patrick-wardle
Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor
Patrick Wardle says a local zero-day can redirect Meta Muse dictation traffic and steal its account token.
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
Patrick Wardle's PoC shows local Mac malware can redirect Meta Muse dictation and hijack granted access.
Meta’s Muse AI Agent 0-Day Vulnerability Allows Attackers to Hijack the Tool and Inject Malware
A local zero-day in Meta's Muse agent lets existing malware redirect dictation, inject prompts, and steal credentials.