SecurityInfoQabout 2 hours ago
Meta Muse macOS Zero-Day Bypassed Security
4 min read
Security researcher Patrick Wardle disclosed an unpatched zero-day in Meta's macOS Muse client. A debug key, endo_voyager_dictation_endpoint, let unprivileged code reroute dictation audio and steal authentication tokens. Meta shipped a hotfix stripping the key from production builds but never issued a CVE. The flaw turned the trusted AI assistant into an attack surface for prompt injection and data exfiltration.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMeta
