Meta patches Muse exploit that let attackers control the AI agent
The zero-day exploit required local access to the user’s device, but gave potential attackers access to Muse accounts. | Image: The Verge Meta has issued a patch for its Muse macOS app following the discovery of a zero-day vulnerability that could allow someone to take control of the AI agent. The
The zero-day exploit required local access to the user’s device, but gave potential attackers access to Muse accounts. | Image: The Verge Meta has issued a patch for its Muse macOS app following the discovery of a zero-day vulnerability that could allow someone to take control of the AI agent. The bug found by security researcher Patrick Wardle utilized an undocumented Muse setting that enabled potential attackers running local code to redirect transcription processing from Meta's servers to their own endpoint, Ars Technica reports, giving the attacker access to the Muse account. Several design decisions reportedly enabled this flaw, including having Muse dictation occur in the cloud instead of on-device, and allowing any app to control all of Muse's undocumented settings. Pr … Read the full story at The Verge.
Key Takeaways
- •The zero-day exploit required local access to the user’s device, but gave potential attackers access to Muse accounts
- •This story was reported by The Verge AI, covering developments in the news space.
- •AI advancements continue to reshape industries — read the full article on The Verge AI for complete coverage.
📖 Continue reading the full article:
Read Full Article on The Verge AI →
