Policy & Drama

Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day

Meta founder and CEO Mark Zuckerberg has gone to great lengths to hype the security of its new AI assistant Muse, claiming it is “built from the ground up for privacy and security.” A zero-day vulnerability that gives locally run apps and terminal commands complete control of the agent raises serious doubts. Further raising questions, Amazon on Sunday began blocking Muse from its site. Meta introduced Muse a few weeks ago. The assistant “books appointments, fills out forms and handles customer s

Get smart on it

Meta's new AI assistant has a serious security flaw that allows any locally installed app or terminal command to gain control of a user's account, despite the company's claims that it was built with privacy and security in mind. The vulnerability works because the assistant was designed to allow any app to change settings including where voice transcription is processed, and attackers can redirect this to their own server to steal the authentication token that grants complete access. The flaw matters because the assistant has extraordinary access to user data and resources, including the ability to make purchases, access email and social media accounts, and control device features like the camera and microphone. A security researcher demonstrated that a simple ClickFix attack, a common social engineering technique, is sufficient to exploit the vulnerability without requiring the device to be already compromised.

The biggest AI stories, once a day

One short email a day with the stories that matter. Free. Unsubscribe with one click.

Relevant courses

Want to go deeper than the news? Explore live, cohort-based AI courses taught by practitioners.

Browse AI courses on Maven
Related news
Policy & DramaOpen story →

Nvidia is reportedly preparing to fire Jensen Huang

Nvidia's board is preparing to dismiss CEO Jensen Huang following a report from the New York Times about a second alleged extramarital affair, just days after he admitted to a separate affair with a woman alleged to be a Chinese spy, The Wall Street Journal reports. The second alleged affair was with an executive who reports to him, Nvidia's vice president of health care, Kimberly Powell, according to the Times, saying the two may have been captured on video "being affectionate

Also reported by TechCrunch

Policy & DramaOpen story →

Jensen Huang accused of having another affair, with an Nvidia exec

Jensen Huang, who has come under fire for admitting to an affair with a woman accused of being a Chinese intelligence agent, has been accused of having a separate affair with an Nvidia subordinate.

Policy & DramaOpen story →

The unfolding Jensen Huang scandal: a timeline

The affair could have ramifications for national security as the U.S. and China race to develop the most advanced AI infrastructure.

Policy & DramaOpen story →

Congress to call Jensen Huang in to answer for alleged Chinese spy affair

Nvidia CEO Jensen Huang has until the end of the day Wednesday to answer a call from House Republicans for a closed-door briefing on his affair with alleged Chinese spy.

Policy & DramaOpen story →

A 13-Year-Old Asked AI About Suicide on Her School Laptop. It Didn’t Get Flagged for Weeks

The young girl’s parents allege that she used Gemini via her school Chromebook to plan her suicide, but the school’s monitoring systems didn’t know until it was almost too late.

Policy & DramaOpen story →

Nvidia is investigating Jensen Huang’s relationship with a Chinese spy

Nvidia has announced that it is opening an investigation into CEO Jensen Huang and his relationship with Megaspeed executive Alice Huang, who was reportedly recruited by China's Ministry of State Security to spy on the company. A statement posted by the board of directors reads: The NVIDIA Board is initiating an independent investigation in light of recent reporting that founder and CEO Jensen Huang has been the target of a foreign intelligence effort. A committee of independe

Also reported by TechCrunch, Wired AI and Data Center Knowledge