One Hidden Meta Muse Setting Let Attackers Take Control of the AI Agent — 22.09.2026

Security researcher Patrick Wardle demonstrated in a proof of concept that malware already running on a Mac can change a hidden Meta Muse dictation setting and redirect the user's speech to an attacker-controlled address. This requires the attacker to already be able to run code as the logged-in user; Muse cannot independently break into a Mac through this flaw.