Meta CEO Mark Zuckerberg said its Muse AI agent was "built from the ground up for privacy and security," but researcher ...

Meta CEO Mark Zuckerberg said its Muse AI agent was "built from the ground up for privacy and security," but researcher Patrick Wardle found a zero day that let any local app or terminal command on macOS capture a user's Muse account token by redirecting dictation to an attacker's server; Meta says it has issued a hotfix. 404 Media reports internal posts show a weeks long hardening push over a spike in "KVM escapes," at least one of which could have exposed internal Meta databases, and an anonymous Meta source said many senior engineers expect "a massive data breach" and called the fixes "half-baked protections." Apple has since changed macOS Full Disk Access controls after columnist Jason Aten said Muse referenced a Messages thread it had no permission to read, which Meta disputes. Wired also reports Muse builds detailed profiles of users' friends and family, which CDT's Miranda Bogen says will balloon what companies know about users.https://www.techdirt.com/2026/10/06/metas-muse-is-a...