One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor

Malware already running on a Mac can quietly take over Meta's Muse assistant and use the broad access its owner granted the app, security researcher Patrick Wardle has shown in a proof-of-concept released on September 21. It works by changing a hidden setting so that when the user taps the microphone and dictates a prompt, the words go to the attacker instead of Meta. The flaw is in

A proof of concept reportedly shows that malware already running on a Mac can modify a hidden Meta Muse setting so dictated prompts are redirected to an attacker instead of Meta, potentially exposing prompts and enabling misuse of access granted to the assistant. The reported issue involves unauthorized control of an AI assistant through local malware rather than prompt injection. RealGround analysis: security testing should validate assistant configuration integrity, local privilege boundaries, microphone and data-routing controls, and detection or recovery mechanisms for tampering.