Meta Patches Muse AI Zero-Day Flaw

Meta patched a zero-day in its two-week-old Muse AI assistant for Mac after researcher Patrick Wardle disclosed that a dictation setting could be hijacked to redirect audio and an authentication token to an attacker's server. Meta called it a low-risk local privilege escalation and removed the setting. Amazon separately asked Meta to stop Muse shopping on its behalf.