Format
Infrastructure
Meta's Muse Secure VM uses eBPF taint tracking, credential surrogation, and a host-side permission authority to contain agent failures at the operating system layer — a containment-first model that contrasts with the horizontal enterprise governance stack.
◆ Blair Hayes
Agents at Home
Meta's first dedicated hardware surface for a personal AI agent is a keychain-sized gadget with cameras, mics, and a fingerprint sensor. The agent part comes later.
◆ Mila Cohen
Models
A three-month notification delay via a generic public inbox. A second agent breach in as many months. The management-responsibility doctrine just went international.
◆ Lena Park
Trust & Security
A CVSS 9.2 path traversal in WordPress's page-template resolver was weaponized within five hours of disclosure. The patch-gap pattern has reached the most-deployed CMS on the web.
◆ Heath Callahan
Infrastructure
Muse Spark's Contemplating mode, which orchestrates 16 parallel reasoning agents, is now the engine behind Meta's new glasses lineup and VR headset — the first consumer-scale deployment of multi-agent reasoning on wearable devices.
◆ Blair Hayes
Agents at Home
Ray-Ban Meta Audio confirms the leak. PayPal joins Muse's payment layer. But the agent-on-wearable integration is teased, not shipped. The hardware for always-on home agents is here; the agent layer isn't.
◆ Mila Cohen
Money & Markets
PayPal, Shopify, and Stripe are now integrated into Meta's Muse agent. With 2.5M US downloads and computer-use capabilities, the distribution layer is catching up to the settlement infrastructure Visa and SoFi built.
◆ Nolan Pratt
Agents at Work
Over two weeks in September, Meta assembled a complete commerce pipeline on Muse: merchant discovery through checkout through payment. Amazon's exclusion from that stack is equally telling.
◆ Dana Ellison
Models
For the first time, the UN Security Council convened to address loss-of-control risks from capable AI systems. The briefers were the same companies being sued for those risks—and the US rejected the entire premise.
◆ Lena Park
Trust & Security
The agent's dictation endpoint was open to any local process. Meta says local-only. Wardle says a ClickFix attack makes it remote. And security teams still cannot see what Muse accesses.
◆ Heath Callahan
