Muse for Mac 曝零日漏洞可劫持提示词

International Cyber Digest @IntCyberDigest原推发布于 2026.09.22

在 X 上打开原推

‼️ BREAKING: A zero-day has been released for Muse, Meta's new AI agent, and a Meta AI security engineering manager who left the company this month says he would never use it, citing security and privacy concerns. He was reacting to the zero-day a researcher posted, which lets malware hijack Muse for Mac. A local process with no special privileges can change an undocumented Muse setting and send dictated prompts to an attacker's server. This could allow for prompt capture, prompt injection and theft of Muse's authentication material. It can also get access to whatever the user has let Muse access, including files, Mail, Messages, Calendar and Notes.