Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw

Meta's Muse AI assistant, which handles tasks like booking appointments and making purchases, contained a zero-day vulnerability (a previously unknown security flaw) that allowed any locally installed app or terminal command to gain control of the user's Muse authentication token and change critical settings. This completely bypassed Apple's built-in macOS security protections that are designed to prevent unauthorized access to sensitive resources like files, camera, and microphone.