Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw

**Executive summary:** A zero-day in Meta's Muse macOS app allowed local processes or terminal commands to modify undocumented settings (including the transcription endpoint) and steal the token that grants full control of a Muse account, enabling account takeover and access to device resources; proofs-of-concept were developed by a researcher and Meta released a hotfix after disclosure.