EventCybersecuritySeptember 22, 2026

Meta patches Muse zero-day that let attackers control the AI agent

Security researcher Patrick Wardle showed a hidden Mac setting, endo_voyager_dictation_endpoint, could redirect Muse dictation to an attacker, who then inherits the agent's broad file, email and message access. Meta issued a fix; Muse passed 2.5 million downloads since its September 8 launch.

People · Patrick Wardle, David Singleton

How this story unfolded

2 days · 4 reports · 4 of 5 shown

  1. Sep 21
  2. Sep 22
  3. Sep 23

More stories today

Open the live feed