From Mashable · Matt Binder · · 1m 10s
Meta Muse zero-day vulnerability
A Mac security flaw lets attackers hijack Meta's AI assistant Muse without detection.
In brief
A Mac security flaw lets attackers hijack Meta's AI assistant Muse without detection. A zero-day vulnerability in Meta's Muse AI assistant allows attackers to hijack Mac computers by exploiting its cloud-based dictation feature. Originally reported by Mashable.
Meta launches Muse AI assistant
Meta launched its new ai assistant muse to much fanfare earlier this month.
Zero-day vulnerability discovered
A zero-day vulnerability has reportedly been discovered that could put access to your entire mac computer in the wrong hands.
Security expert warns of risk
macos security expert patrick wardle posted on x about the vulnerability with the muse app.
How the exploit works
the vulnerability lets local malware attackers invisibly hijack a user's mac by changing the transcription endpoint server address.
Muse's permission risks
muse requires extensive mac permissions more than most third-party apps and uses cloud for dictation instead of apple's local approach.
Meta's response and consequences
meta built a secure vm for muse but the vulnerability remains; amazon blocked muse from purchasing products on its e-commerce site.
The one thing
A zero-day vulnerability in Meta's Muse AI assistant allows attackers to hijack Mac computers by exploiting its cloud-based dictation feature.
