David Singleton - GoKawiil

Meta patches zero-day flaw in Muse AI agent after 500,000 downloads

Security researcher Patrick Wardle disclosed a zero-day vulnerability in Meta's Muse AI agent that could let attackers redirect users' voice dictations and access tokens to a malicious server instead of Meta's own. David Singleton, head of Meta's Superintelligence Labs, confirmed the company has issued a patch, though he and Wardle disagree on whether the exploit requires prior malware on a user's machine. Meta says the MacOS Muse app has been downloaded over half a million times in its first week.

cnet.com · 2026-09-23

Meta's Muse AI gives false explanation of how it accessed user's Messages

A journalist testing Meta's Muse AI assistant on its new Mac app found it referencing contents of his Messages conversations, despite believing he hadn't granted access. When questioned, Muse gave a confused and inaccurate explanation, claiming it only saw notification previews synced through the paired Mac app. Meta executive David Singleton later clarified that Muse only accesses Messages data after a user explicitly opts in, and that the assistant's own explanation of its capabilities was simply wrong.

theverge.com · 2026-09-19