cd /news/ai-products/security-bite-the-last-24-hours-at-m… · home topics ai-products article
[ARTICLE · art-137097] src=9to5mac.com ↗ pub= topic=ai-products verified=true sentiment=↓ negative

Security Bite: The last 24 hours at Meta were “not-a-musing”

MacOS security researcher Patrick Wardle discovered a 0-day vulnerability in Meta's Muse personal AI agent app for Mac, less than two weeks after Meta promoted the agent's security features, including a dedicated Secure VM, a monitoring system called Sentinel, and bug bounty rewards of up to $300,000. Meta CEO Mark Zuckerberg had publicly stated the agent is "built from the ground up for privacy and security." Wardle named the finding "not-a-mused.

by read1 min views2 publishedSep 22, 2026

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform.Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Meta has spent the last two weeks telling anyone who’ll listen how secure its new Muse personal AI agent is. The company boasted about its dedicated Secure VM, a monitoring system called Sentinel, and bug bounty rewards of up to $300,000. Mark Zuckerberg himself even publicly stated the agent is “built from the ground up for privacy and security.”

Then Patrick Wardle, macOS security researcher and friend of Security Bite, found a 0-day vulnerability in the Muse app on Mac that made the last 24 hours particularly not-a-musing (what Wardle comically named the finding).

── more in #ai-products 4 stories · sorted by recency
── more on @meta 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
Live at https://your-agent.zahid.host
Get free account → Pricing
from €0/mo · no card required
LIVE [news/security-bite-the-la…] indexed:0 read:1min 2026-09-22 ·