Meta patches Muse zero-day that let attackers hijack the AI agent
Read original source →arstechnica.com
Security researcher Patrick Wardle showed a hidden Muse setting, endo_voyager_dictation_endpoint, let any local process redirect dictation to an attacker's endpoint and steal the account token. Meta patched the macOS app within hours of the Ars Technica report; Amazon began blocking Muse from its site Sunday.
People · Patrick Wardle
How this story unfolded
3 days · 7 reports · 2 community posts · 9 of 12 shown
- Sep 21
- Sep 22
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoorthehackernews.com
Meta patches Muse exploit that let attackers control the AI agenttheverge.com
Meta’s New Muse AI Agent Read Jason Aten’s Messages Databaseinc.com
How Meta's Muse works, revealed by the 6.8 GB filesystem it sent me
- Sep 23
- Sep 24
More stories today
SmolDataEnvs releases 5K+ verifiable RL environment tasks
Adithya S K·4 hours ago
Noam Brown discusses AI models hiding their reasoning
Dwarkesh Patel interview with Noam Brown examines AI systems learning to conceal their thinking. No specific models, benchmarks, or dates are given in the available source material.
YouTube·5 hours ago
Opus 5.5 turns an AI video into a playable 90s walking sim
Denis Shiryaev used Opus 5.5 to rebuild a 2015 AI-generated video as a playable 90s-style fantasy walking simulator, published as a Claude artifact titled "The Castle Road."
r/Singularity·5 hours ago
Bloomberg hosts live Q&A on US-China AI rivalry
Bloomberg journalists Stephen Engle, Michael Shepard, Nectar Gan and Henry Ren answer reader questions on the US-China AI race on Friday, Sept. 25 at 9 a.m. EDT / 9 p.m. HKT.
Bloomberg Technology·5 hours ago
Cerebras Hot Seat: Angela Yeung on scaling AI hardware
Cerebras interview covers architectural breakthroughs and engineering challenges in scaling compute for modern AI workloads, including hardware optimization and wafer-scale performance.
YouTube·5 hours ago
Stripe: 55% of pull requests now start as Claude Code prompts
Stripe CEO Patrick Collison said about 55% of the company's pull requests begin as a prompt to Minions, Stripe's internal tool for orchestrating Claude Code on throwaway VMs. Stripe runs its core APIs at five and a half nines of reliability.
YouTube·5 hours ago
Meta's Muse assistant demoed in playful exchange with Elon
Alexandr Wang·5 hours ago
Developer builds Yu-Gi-Oh! AR app for SPECS with Astra
A Reddit user spent about two days building a prototype that turns a physical Yu-Gi-Oh! card into a 3D monster on the field, using Astra, CLAD, and Lens Studio. The project was inspired by a Pokémon AR demo going viral on X.
r/OpenAI·5 hours ago