Muse (Meta personal agent) changelog

Muse share links exposed private conversations, Meta pauses sharing

Researchers at Claroc found 6,800 Muse conversation share links through public DNS records, because each link puts the conversation title in the web address, and saw loan applications, revenue reviews and a partial bank account number. Meta told Ars Technica it has paused the sharing feature while it reviews the report.

Who is affected:

Muse users who shared conversations by link.

Action needed:

Review conversations you shared from Muse and assume their links may have been found.

Researcher discloses a Muse Mac app zero-day that lets local malware hijack the agent

macOS security researcher Patrick Wardle disclosed a zero-day in the Muse Mac app: another app on the same Mac could change the dictation transcription endpoint and take over the Muse account. Mashable reported on September 22 that Meta had not yet fixed it.

Who is affected:

People using the Muse app on a Mac.

Action needed:

Update the Muse Mac app and avoid running untrusted apps or pasted terminal commands.