Meta patches Muse's one zero-day

Meta patched a zero-day in its Muse macOS AI agent after security researcher Patrick Wardle showed that a local attacker could take control of the assistant; The Verge’s report says Meta issued a hotfix within hours, called practical risk low because local access was required, and saw its stock climb 11% on Monday. Ars Technica’s assessment says the design granted Muse unusually broad privileges, while no real-world exploitation was confirmed. Builders should treat desktop agents with account and device access as privileged software, requiring scoped permissions, signed updates, and a kill switch before autonomous actions—an extension of the archive’s local-agent hardware analysis.