Trending storyPast story
Meta's Muse AI assistant has serious zero-day vulnerability, Amazon begins blocking
1 report1 sourceupdated 7 days ago
What happened
From the coverage
Meta 新推出的 AI 助手 Muse 被曝存在一个严重 0-day 漏洞，攻击者可以通过 ClickFix 攻击（诱导用户点击并执行恶意命令）完全劫持该助手，并窃取账户令牌。扎克伯格曾公开宣称 Muse 是“从头为隐私和安全打造的”，但这个漏洞直接打了脸。正文没有披露该漏洞是否已修复，也没有说明受影响用户范围。
From AI HOT 精选
Coverage
Follow the reports to see the story from different sides.
Sep 22
- AI HOT (Curated Pool)Meta's AI assistant Muse has a serious 0-day that lets local apps steal account tokens
A serious 0-day in Meta's AI assistant Muse allows attackers to fully hijack the agent and steal account tokens via a ClickFix attack. CEO Zuckerberg had touted Muse as 'built from the ground up for privacy and security.' The post does not disclose whether the vulnerability has been patched or the scope of affected users.