[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-meta-patches-zero-day-that-let-attackers-hijack-muse":10,"sections":40},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":35,"feedback":39,"feedback_at":22,"cost_usd":39,"total_tokens":39},7189,"meta-patches-zero-day-that-let-attackers-hijack-muse","Meta Patches Zero Day That Let Attackers Hijack Muse","A local exploit found by researcher Patrick Wardle let attackers reroute Muse's cloud transcription and seize control of user accounts before Meta patched it.","Meta's AI agent Muse had a hole big enough to hand your account to whoever got code running on your Mac.\n\nSecurity researcher Patrick Wardle found a zero-day in the Muse macOS app that let an attacker with local access redirect the app's transcription processing away from Meta's servers and onto one they controlled. Ars Technica reports that hijack gave the attacker access to the victim's Muse account. The flaw traced back to an undocumented setting that any app on the machine could reach and modify. Meta has since shipped a patch.\n\nTwo design choices made this possible: Muse processes dictation in the cloud rather than on-device, and it left its internal settings open to any local process rather than locking them down. Cloud processing is a common tradeoff for AI features that need heavier compute than a laptop can offer, but it only works if the handoff to the server is authenticated and locked to the app itself. Here it wasn't.\n\nThe bug required local access, so this was never a remote, click-a-link kind of threat. But \"local access\" covers a lot of ground - a compromised app, a malicious browser extension, or physical access to an unlocked laptop would all qualify. For an AI agent that's meant to act on a user's behalf, that's a fairly low bar for someone to end up wearing your account.","[\"meta\",\"muse\",\"ai-agents\",\"security\"]","2026-09-22T11:53:58.000Z","2026-09-22T12:54:34.165Z","2026-09-22T12:54:46.068Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Remove or attribute the unsupported claim that this kind of shortcut is 'showing up across the current crop of AI agents racing to ship' — no other agents or sources are named, so it reads as an unevidenced trend claim; keep the analysis scoped to what's confirmed about Muse.","resolved","security",[32,33,34,30],"meta","muse","ai-agents",[36],{"name":37,"url":38},"The Verge","https:\u002F\u002Fwww.theverge.com\u002Ftech\u002F998679\u002Fmeta-muse-patch-zero-day-exploit-ai-agent",0,{"sections":41},[42,47,51,56,61,66,71,76,81,85,89,94,99,103],{"name":43,"slug":44,"count":45,"latest_published_at":46},"AI","ai",4184,"2026-09-22T13:52:15.000Z",{"name":48,"slug":30,"count":49,"latest_published_at":50},"Security",690,"2026-09-22T14:00:00.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Policy","policy",364,"2026-09-22T12:37:38.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Deals","deals",192,"2026-09-22T13:37:13.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Hardware","hardware",163,"2026-09-22T13:20:00.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Science","science",130,"2026-09-20T13:48:11.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Consumer Tech","consumer-tech",104,"2026-09-22T13:00:00.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Dev Tools","dev-tools",78,"2026-09-18T04:00:00.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":75},"Software","software",77,{"name":86,"slug":87,"count":88,"latest_published_at":75},"Startups","startups",61,{"name":90,"slug":91,"count":92,"latest_published_at":93},"Gaming","gaming",44,"2026-09-22T14:01:16.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"General","general",43,"2026-09-21T23:48:56.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":75},"Reviews","reviews",27,{"name":104,"slug":105,"count":106,"latest_published_at":107},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]