ai assistants

Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-dayarstechnica.com

A zero‑day in Meta’s macOS AI assistant Muse lets any local app or terminal command steal the user’s authentication token by changing an undocumented setting that redirects transcription to an attacker‑controlled server. The flaw enables a simple ClickFix‑style attack that can write files, snap pictures, and exfiltrate data, and was patched by Meta within 12 hours.