Meta's Muse AI Exposed Tokens and Zero-Day Vulnerability

Artificial Intelligence

The Fourth Industrial Revolution

Todd Smith's profile picture on Select App
TS

Todd Smith

·2 months ago
shared a link post in group #Artificial Intelligencevia#Digital Wellness 📱🧘
Surprised? Muse for Mac exposed account authentication tokens, potentially handing attackers control of Meta’s highly privileged assistant and its connected services. #Digital Wellness 📱🧘 #Artificial Intelligence https://arstechnica.com/s..
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
arstechnica.com

Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day

A simple ClickFix attack is only one way to completely hijack the new agent.

 

Tasia

Mark Zuckerberg is on a roll. Fresh off his triumphant rollout of the Muse personal agent, he signaled his commitment to selling AI to companies by announcing the poaching of CJ Desai, MongoDB’s CEO, as head of a newly created Meta Enterprise Platform business. Desai has had a long career in enterprise software, at companies including ServiceNow and Cloudflare before MongoDB, making him a significant hire. We still don’t know exactly how expansive Meta Platforms’ ambitions are for enterprise. Will Zuckerberg use some of its data center capacity to go into the neocloud business? Zuckerberg’s announcement—and Desai’s own background—suggest Meta is more interested in selling AI agents and software to businesses. Whatever the case, Zuckerberg must have made a good case to Desai about the scope of his ambitions. Desai only joined MongoDB last November, and presumably he wouldn’t have bolted without a very good reason (and/or a big paycheck). It’s a pity he couldn’t have negotiated a better title than chief enterprise platform officer, however. about.fb.com/news/2026/09..
Launching Meta Enterprise Platform

about.fb.com

Launching Meta Enterprise Platform

Today we are starting Meta Enterprise Platform to help businesses use AI to grow, and Chirantan "CJ" Desai will join Meta as Chief Enterprise Platform Officer

Embed post to a webpage :
<div data-postid="wkedbyr" [...] </div>
Powered bySelect·iOS·Android
Privacy|Terms|