Zero-day in Meta's Muse assistant allows local apps to hijack agent via token theft
Why it matters — The flaw undermines the security model of an agent that requires broad access to user accounts, files, and hardware. It demonstrates that cloud-based transcription and undocumented settings can create critical attack surfaces that bypass standard operating system defenses.