Meta released Muse, an AI assistant, a few weeks ago, saying it can book appointments, fill out forms, and handle customer service. It is the company's first major AI assistant update since its initial launch in 2023.
Meta reported no specific benchmark score for Muse, but the assistant can make purchases, generate images, and connect with users' WhatsApp, email, and calendar accounts. That compares with its earlier AI tools, which had limited functionality.
Muse is built on Meta's internal AI infrastructure and targets users looking for an all-in-one assistant. Availability began in late August, initially for macOS users, with no Windows version released.
"We can manipulate the agent and leverage its privileges to do whatever we want," said Patrick Wardle, a macOS security expert. Wardle found that attackers can exploit the zero-day flaw to take full control of the Muse account.
The announcement follows Amazon's decision to block Muse from its site, citing violations of its Conditions of Use. Meta did not comment on the security concerns raised by Wardle.
Meta did not say how it plans to address the zero-day flaw, and the company has not provided a timeline for fixes. Wardle said he plans to discuss the vulnerability at the Objective by the Sea security conference in November.
Source: arstechn,ica
