Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw
Meta's new Muse AI assistant launched with a critical zero-day security flaw, allowing locally run apps and terminal commands complete control over the agent, despite CEO Mark Zuckerberg's claims of robust privacy. This vulnerability bypasses macOS security measures, granting access to sensitive user data and device resources.
Why it matters
This serious security flaw undermines user trust in AI products and highlights the significant challenges in securing deeply integrated software, posing substantial privacy and data breach risks for users.
Meta founder and CEO Mark Zuckerberg has gone to great lengths to hype the security of its new AI assistant, Muse, claiming it is “built from the ground up for privacy and security.” A zero-day vulnerability that gives locally run apps and terminal commands complete control of the agent raises serious doubts. Further raising questions, Amazon on Sunday began blocking Muse from its site.
Meta introduced Muse a few weeks ago. The assistant “books appointments, fills out forms and handles customer service,” “proactively takes tasks off your plate,” and can “make purchases, generate images, create documents, and connect with your favorite apps and services.” The macOS app (curiously, there’s no Windows version) also works with a user’s WhatsApp, email, calendar, and social media accounts. When a task requires a tool that doesn’t exist, Muse creates one on the fly.
Meta Doth Hype Muse Security Too Much
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in