<![CDATA[Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day]]>cross-posted from: https://lemmy.world/post/52228118

Classic Meta Product

Link Preview Image
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day

A simple ClickFix attack is only one way to completely hijack the new agent.

favicon

Ars Technica (arstechnica.com)
]]>https://citiverse.it/topic/819b736c-510f-4577-84fb-fcd221c0717c/muse-meta-s-extraordinarily-privileged-ai-assistant-has-a-serious-0-dayRSS for NodeSat, 26 Sep 2026 03:08:48 GMTTue, 22 Sep 2026 13:53:15 GMT60<![CDATA[Reply to Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day on Tue, 22 Sep 2026 22:18:13 GMT]]>What a terrible article. Apparently the "0-day" is that the software can be configured by the user to point to a different backend, and that somebody with bad intentions could possibly convince a user to do that.

]]>https://citiverse.it/post/https://discuss.tchncs.de/comment/28332309https://citiverse.it/post/https://discuss.tchncs.de/comment/28332309Tue, 22 Sep 2026 22:18:13 GMT