{
  "id": 9050219,
  "title": "Meta Muse AI app flaw lets local malware redirect dictation traffic",
  "url": "https://urgent.news/2026/09/21/meta-muse-ai-app-flaw-lets-local-malware-redirect-dictation-traffic",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-21T19:59:52.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/ai-and-ml/2026/09/21/meta-muse-ai-app-flaw-lets-local-malware-redirect-dictation-traffic/5297980"
  },
  "original_language": "en",
  "account": "Meta's Muse AI assistant app, touted for its security, may contain a vulnerability that allows local malware to redirect dictation traffic and potentially access sensitive information. The app utilizes a feature called Muse Secure VM, which grants users control over its access levels. However, security researcher Patrick Wardle discovered what he calls a \"local zero-day\" that could enable an unprivileged local process to modify Muse's settings and redirect dictation traffic to an attacker-controlled endpoint. This flaw, if exploited, could lead to prompt injection, theft of authentication material, and abuse of user-granted access. Wardle likens the situation to living in an apartment building, where a malicious neighbor could gain access to all apartments. While Apple has implemented strong security measures like its Transparency, Consent, and Control (TCC) framework, Wardle worries that AI apps, due to their extensive access requirements, could become a single point of failure and undermine operating system security controls. He also questions whether AI companies are prioritizing their own app security. Wardle suggests that Apple's on-device local dictation service could mitigate the risk, but Meta opted not to use it, potentially increasing the attack surface due to their desire for user data. As AI companies race to develop new technologies, Wardle believes privacy and security are not top priorities. Meta declined to comment on the vulnerability.",
  "summary": "Ad biz promises users control while bug could expose voice prompts",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 6,
    "also_reported_by": [
      {
        "outlet": "Business Insider",
        "title": "Amazon is keeping Meta’s Muse out of its shopping carts",
        "url": "https://urgent.news/2026/09/21/amazon-is-keeping-metas-muse-out-of-its-shopping-carts",
        "published": "2026-09-21T14:32:43.000Z"
      },
      {
        "outlet": "The Register",
        "title": "Meta Muse AI app flaw lets local malware redirect dictation traffic",
        "url": "https://urgent.news/2026/09/21/meta-muse-ai-app-flaw-lets-local-malware-redirect-dictation-traffic-9052823",
        "published": "2026-09-21T19:59:52.000Z"
      },
      {
        "outlet": "CNET",
        "title": "No Shirt, No Shoes, No Service: Amazon Blocks Meta’s Muse AI From Shopping",
        "url": "https://urgent.news/2026/09/21/no-shirt-no-shoes-no-service-amazon-blocks-metas-muse-ai-from-shopping",
        "published": "2026-09-21T20:27:31.000Z"
      },
      {
        "outlet": "The Business Times - Companies & Markets",
        "title": "Meta’s new Muse AI app tops charts, draws strong reviews",
        "url": "https://urgent.news/2026/09/22/metas-new-muse-ai-app-tops-charts-draws-strong-reviews",
        "published": "2026-09-22T00:36:57.000Z"
      },
      {
        "outlet": "CNBC World",
        "title": "CNBC Daily Open: AI trade goes Meta after Muse launch",
        "url": "https://urgent.news/2026/09/22/cnbc-daily-open-ai-trade-goes-meta-after-muse-launch",
        "published": "2026-09-22T06:09:14.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}