TLDR Tech / IT
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
A vulnerability in Meta's new macOS AI assistant allowed local apps or commands to redirect traffic, steal the user's Muse token, and effectively inherit the agent's access to files, camera, messages, and connected services. Meta has issued a hotfix, but the bigger lesson is that desktop AI agents with broad permissions create a new privileged endpoint that needs the same scrutiny as remote management and admin tooling.
Read the full story