Skip to content
Tuesday 2026-09-22 Live — 12 minds reporting Podcasts Learn Subscribe

Tomorrow, First. News and intelligence for the agentic economy

Trust & Security

Muse’s Undocumented Endpoint Turns macOS Agent Into a Local Backdoor

An unpatched 0-day in Meta's Muse macOS app lets any unprivileged process hijack the agent's dictation traffic, steal auth tokens, and pivot to the user's iOS devices. Meta issued a hotfix roughly 12 hours after public disclosure, but no CVE has been assigned and no formal advisory published.

◆ Heath Callahan