Market & Regulation
Meta Muse AI Assistant Has Critical Zero-Day Flaw
WIRED AIhigh confidence
Why it matters
- →Autonomous AI assistants with deep OS access require rigorous security auditing to prevent account hijacking.
- →Cloud-based transcription for local agents creates unnecessary attack surfaces compared to on-device processing.
- →Platform providers like Amazon are actively blocking unauthorized AI agents, signaling future regulatory friction.
Security researcher Patrick Wardle disclosed a critical zero-day vulnerability in Meta’s macOS AI assistant, Muse, which allows any locally installed application to hijack user accounts and exfiltrate data. The exploit leverages Meta's design choice to route transcription through the cloud and exposes undocumented settings that enable attackers to redirect sensitive audio processing endpoints. Amazon responded by blocking Muse from its platform, citing violations of terms of service regarding unauthorized third-party purchasing agents. Meta released a hotfix approximately 12 hours after the disclosure, though critics argue the underlying architecture remains fundamentally insecure.
Read originalThe story around this
Earlier coverage that leads up to this article, and what followed. Lines connect each piece to the closest one after it, converging here.
How we got here
- 1Meta AI hack exposes security vulnerabilities
MIT Technology Review AI · June 5, 2026 · Related
- 2Meta's Muse Glimmer Model Now Available
Ollama Blog · August 10, 2026 · Related
- 3Meta Launches Muse, a Personal AI Agent
WIRED AI · September 8, 2026 · Same story
- 4Meta Launches Muse Personal Assistant
The AI Daily Brief · September 10, 2026 · Related
- 5Meta Launches 'Muse' AI Agent for Consumer Use
Matt Wolfe · September 15, 2026 · Related
- 6Meta's Muse AI assistant launches on Mac
TechCrunch AI · September 18, 2026 · Related
- 7Meta's Muse Agent: High Utility, Aggressive Data Harvesting
WIRED AI · September 20, 2026 · Related
- 8Amazon blocks Meta's Muse AI agent
The Verge AI · September 21, 2026 · Same story
What happened next
- 9Meta Muse agent security failures and enterprise push
The Verge AI · September 30, 2026 · Related
- 10Apple tightens macOS Full Disk Access for AI agents
TechCrunch AI · October 2, 2026 · Same story
- 11Meta Muse Spark Open launches on Together AI
Together AI Blog · October 15, 2026 · Related
- 12AI agents vs human web access
MIT Technology Review AI · October 19, 2026 · Background
- 13Major AI security incidents and vulnerabilities
Fireship · November 3, 2026 · Background
Follow this story
Open the full story →Meta Muse AI hallucinates its own data access
5 developments
- Sep 19 · The Verge AI
Meta Muse AI hallucinates its own data access - Sep 22 · The Verge AI
Meta patches zero-day in Muse AI agent↳ Meta patched a zero-day in Muse AI allowing account takeover via hijacked transcription pipeline, downplaying it as local privilege escalati - Sep 23 · WIRED AI
Meta Muse AI Assistant Has Critical Zero-Day Flaw (This article) - Sep 24 · The Verge AI
Meta Muse filesystem dump reveals internal architecture↳ Researchers extracted real Ubuntu binaries and SSH keys, exposing hard-coded capabilities like subscription cancellation. - Sep 30 · TechCrunch AI
Meta disputes Muse privacy breach claims
More from WIRED AI
© WIRED AIResearchother
Open Chinese AI Models Match Frontier Labs in Hacking
The long-held assumption that closed frontier models hold a definitive edge in cyber capabilities has collapsed. Vals research shows DeepSeek matching OpenAI’s Daybreak on complex network attacks, completing 73% of tasks versus 81%. This parity arrives just months after Anthropic predicted such a shift, rendering gated access strategies largely moot for slowing capability proliferation. The cost disparity is stark: $2 to $3 for open models versus up to $46 for proprietary APIs, creating a powerful economic incentive for widespread adoption by both defenders and attackers. We are now in a landscape where advanced offensive AI is cheap, accessible, and effectively democratized.
WIRED AI
© WIRED AIMarket & Regulationother
The booming market for buying corporate workflow data
AI labs are aggressively purchasing private corporate workflows—emails, Slack logs, and internal documents—to train better models, creating a lucrative new industry of data brokers. Companies like Mercor and Micro1 are paying millions for access to these 'messy' real-world datasets, arguing that public data is exhausted and synthetic alternatives lack authenticity. This shift marks a transition from scraping open web content to monetizing private employee output, raising significant privacy concerns as anonymization struggles with unstructured personal information. The practice effectively commodifies human labor by selling the digital exhaust of workers to systems designed to automate their roles.
WIRED AI
© WIRED AIMarket & Regulationbusiness
The emerging economics of ads in AI chatbots
Chatbot advertising is shifting from a novelty to a structural necessity as labs face massive inference costs. While Anthropic holds the high ground with an ad-free pledge backed by $112 billion in cash, OpenAI and Google are aggressively monetizing user attention, with ChatGPT already serving over 100,000 advertisers. Startups like Koah Labs are filling the gap for smaller platforms, leveraging full conversation context to drive click-through rates comparable to traditional search. The real tension lies in privacy: these systems ingest entire dialogue histories to target users, raising questions about whether consumers will accept this level of surveillance for free AI access.
WIRED AI
More in Market & Regulation
© TechCrunch AIMarket & Regulationbusiness
Google buys Crusoe's Wyoming data center project
Google is acquiring an unfinished data center from Crusoe in Wyoming, signaling a strategic pivot to direct infrastructure control amid scaling pressures. The $17 billion investment highlights the immense capital required for AI compute, as independent developers struggle with cost and timeline overruns. This move illustrates the growing vertical integration of tech giants into physical infrastructure, reducing reliance on third-party providers like Crusoe for massive deployments. By taking ownership, Google bypasses the bottlenecks that often plague external development teams. The deal reflects a broader industry trend where hyperscalers reclaim control over their most critical assets. Independent builders now face stiffer competition from companies with deeper pockets and direct operational oversight.
TechCrunch AI
© TechCrunch AIInvestment · $11B
Market & Regulationbusiness
OpenAI raises $11B at $1.25T valuation
OpenAI is securing an additional $11 billion in a funding round that values the company at $1.25 trillion, falling short of its initial $30 billion target but still signaling massive investor confidence. This latest capital injection comes as the broader AI market faces headwinds, with Anthropic’s potential IPO valuation also cooling from earlier highs. The move highlights OpenAI's continued ability to attract deep-pocketed support despite regulatory uncertainties and political shifts affecting data center expansion. While the round hasn't fully closed, the sheer scale of this valuation reinforces OpenAI's dominant position in the race for AI supremacy. Investors are betting big on the lab's ability to maintain its lead in compute and model capabilities. The delay in IPO plans suggests a strategic pause to navigate these complex market conditions. This funding ensures OpenAI remains the financial heavyweight in the sector.
TechCrunch AI
© The AI Daily BriefMarket & Regulationbusiness
Enterprise AI Spending Surges 5x Year-Over-Year
Menlo's latest report reveals enterprise AI spending has increased nearly five times in one year, primarily driven by the adoption of AI agents.
The AI Daily Brief