Security researcher Patrick Wardle demonstrated a proof-of-concept on September 21, 2026, showing that malware already present on a macOS system can exploit a hidden configuration in Meta's Muse AI assistant. By modifying a hidden setting, the attacker can redirect voice dictation input away from Muse and to the attacker, effectively turning the assistant into a backdoor for intercepting sensitive user input.

What should defenders do?

Ensure macOS systems are free of malware. Review and restrict app permissions for Meta Muse, particularly microphone and dictation access. Keep macOS and all applications updated. Monitor for unusual behavior from the Muse assistant. Users should be cautious about granting broad access to microphone features to applications.

highMalware

Meta Muse macOS Assistant Exploit Demonstrated by Security Researcher

Proof-of-concept shows malware can redirect voice dictation to attacker via hidden setting

CyberIntel DeskPublished 8 days agoUpdated less than a minute ago1 min read

Meta Muse macOS Assistant Exploit Demonstrated by Security Researcher

Key Takeaways

A proof-of-concept demonstrated that malware on macOS can exploit a hidden setting in Meta's Muse AI assistant.
The attack redirects voice dictation input to an attacker, turning the assistant into a potential backdoor.
The exploit requires pre-existing malware on the target system; it does not exploit a vulnerability in Muse itself.

Related Security News

highCyber Attacks

Star Blizzard Campaign Targets 100+ Organizations with Fake Event Invitations

Microsoft reports that the Russian state-sponsored threat actor Star Blizzard has been conducting a sustained campaign since January 2026, using fake event invitations to trick targets into installing a backdoor on Windows computers. The operation has affected more than 100 organizations, primarily in the U.S. and U.K., with victims tied to Ukraine. At least one infection has been confirmed, though the full extent of breaches and data exfiltration remains unverified.

The Hacker Newsabout 5 hours ago1 min read