Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor

Malware already running on a Mac can quietly take over Meta's Muse assistant and use the broad access its owner granted the app, security researcher Patrick Wardle has shown in a proof-of-concept released on September 21. It works by changing a hidden setting so that when the user taps the microphone and dictates a prompt, the words go to the attacker instead of Meta. The flaw is in
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
SA

SariMartinez

2h ago
0 0

Discussion

Say something first

It all starts with you—share your thoughts now.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

schneier.com
Reverse-Engineering Flock Cameras

Hackers captured a Flock camera and got a look (alternate link) at the software: While much of the automatic license plate reader’s (ALPR) most sensitive…
SS

Schneier on Security

10h ago
0
darkreading.com
How AI Agents Can Trigger Runaway Costs for Enterprises

Unbounded consumption is an issue that OWASP currently ranks sixth in its Top 10 for LLM Applications, and it could be an extremely costly one.
DR

Dark Reading

12h ago
0
thehackernews.com
Fake LastPass Authenticator Installer Abuses Microsoft-Signed D…

A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a passwo…
CA

Carlos

12h ago
0
thehackernews.com
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, Cl…

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things people alrea…
TN

The Hacker News

14h ago
0
bleepingcomputer.com
Microsoft reminds admins to migrate Entra ID users to passkeys

Microsoft has reminded admins to migrate Entra ID users to phishing-resistant authentication methods to avoid sign-in disruptions after it retires SMS first-fa…
CA

Carlos

17h ago
0
bleepingcomputer.com
Microsoft: September updates break File History backup feature

Microsoft warned that the built-in File History backup feature in Windows may stop working on some systems after installing the September 2026 security updates…
LK

Lars Khan

19h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Fake LastPass Authenticator Installer Abuses Microsoft-Signed D…

A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a passwo…
CA

Carlos

12h ago
0
thehackernews.com
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, Cl…

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things people alrea…
TN

The Hacker News

14h ago
0
thehackernews.com
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C…

Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript. "ChainScript has appeared…
CA

Carlos

21h ago
0
thehackernews.com
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF an…

The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information techno…
TN

The Hacker News

1d ago
0
thehackernews.com
Can You Prove a New CVE Is Exploitable Before Attackers Do? Lea…

A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can it actually be exploited…
Thanakorn Boon

Thanakorn Boon

2d ago
0
thehackernews.com
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Account…

Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of sev…
Rosa Martinez

Rosa Martinez

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest