importantSYS.SOURCE: The Hacker News• 2026-09-22T12:03:57+05:30

Hidden Meta Muse Setting Enables AI Assistant Backdoor via Dictation Hijacking

#ai #vulnerability #macos #security #backdoor

A hidden setting in Meta's Muse AI assistant on macOS allows attackers to redirect voice dictation to a malicious endpoint, enabling token theft and remote control. The flaw requires existing malware but bypasses macOS security by leveraging Muse's permissions, posing a significant risk to user data and device control.

Malware already running on a Mac can quietly take over Meta's Muse assistant and use the broad access its owner granted the app, security researcher Patrick Wardle has shown in a proof-of-concept released on September 21.

It works by changing a hidden setting so that when the user taps the microphone and dictates a prompt, the words go to the attacker instead of Meta.

The flaw is in

Read original article

*** END OF TRANSMISSION ***

> AI ADOPTION AMONG YOUNG USERS (9-18) RAISES CONCERNS OVER CRITICAL THINKING DEVELOPMENT > APPLE REMOVES USER CONSENT OPTION FOR AI FEATURES IN MACOS 15.3 UPDATE > SIDECOPY APT GROUP EXPANDS TARGETING OF INDIAN ACADEMIA VIA REVERSERAT SPEAR-PHISHING > HIDDEN META MUSE SETTING ENABLES AI ASSISTANT BACKDOOR VIA DICTATION HIJACKING > GZIP AS A LANGUAGE MODELING APPROACH VIA COMPRESSION-PREDICTION EQUIVALENCE > WORDPRESS COMMENT2SHELL VULNERABILITY EXPLOITS XSS TO ACHIEVE RCE VIA ADMIN SESSION > MORPHOTONICS SECURES €40M TO SCALE NANOIMPRINT LITHOGRAPHY FOR AR DISPLAYS AND DATA CENTER OPTICS > ACTIVE EXPLOITATION OF ZYXEL AND VEEAM VULNERABILITIES ENABLES COMMAND EXECUTION AND SYSTEM ACCESS > 2019 USED THINKPAD PURCHASE GUIDE: FEATURES, RECOMMENDATIONS, AND EBAY DEAL STRATEGIES > MIMO-V2.6-PRO MODEL ANALYSIS: INTELLIGENCE, PERFORMANCE, AND COST EVALUATION> AI ADOPTION AMONG YOUNG USERS (9-18) RAISES CONCERNS OVER CRITICAL THINKING DEVELOPMENT > APPLE REMOVES USER CONSENT OPTION FOR AI FEATURES IN MACOS 15.3 UPDATE > SIDECOPY APT GROUP EXPANDS TARGETING OF INDIAN ACADEMIA VIA REVERSERAT SPEAR-PHISHING > HIDDEN META MUSE SETTING ENABLES AI ASSISTANT BACKDOOR VIA DICTATION HIJACKING > GZIP AS A LANGUAGE MODELING APPROACH VIA COMPRESSION-PREDICTION EQUIVALENCE > WORDPRESS COMMENT2SHELL VULNERABILITY EXPLOITS XSS TO ACHIEVE RCE VIA ADMIN SESSION > MORPHOTONICS SECURES €40M TO SCALE NANOIMPRINT LITHOGRAPHY FOR AR DISPLAYS AND DATA CENTER OPTICS > ACTIVE EXPLOITATION OF ZYXEL AND VEEAM VULNERABILITIES ENABLES COMMAND EXECUTION AND SYSTEM ACCESS > 2019 USED THINKPAD PURCHASE GUIDE: FEATURES, RECOMMENDATIONS, AND EBAY DEAL STRATEGIES > MIMO-V2.6-PRO MODEL ANALYSIS: INTELLIGENCE, PERFORMANCE, AND COST EVALUATION