Security Bite: The last 24 hours at Meta were “not-a-musing”

MacOS security researcher Patrick Wardle discovered a 0-day vulnerability in Meta's Muse personal AI agent app for Mac, less than two weeks after Meta promoted the agent's security features, including a dedicated Secure VM, a monitoring system called Sentinel, and bug bounty rewards of up to $300,000. Meta CEO Mark Zuckerberg had publicly stated the agent is "built from the ground up for privacy and security." Wardle named the finding "not-a-mused.

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform . Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL https://mosyle.net/87PQ today and understand why Mosyle is everything you need to work with Apple . Meta has spent the last two weeks telling anyone who’ll listen how secure its new Muse personal AI agent https://9to5mac.com/2026/09/17/meta-ai-launches-muse-personal-agent-including-a-new-mobile-app-for-iphone/ is. The company boasted about its dedicated Secure VM, a monitoring system called Sentinel, and bug bounty rewards of up to $300,000. Mark Zuckerberg himself even publicly stated https://x.com/finkd/status/2097402102477701478?s=20 the agent is “built from the ground up for privacy and security.” Then Patrick Wardle https://x.com/patrickwardle , macOS security researcher and friend of Security Bite , found a 0-day vulnerability in the Muse app on Mac that made the last 24 hours particularly not-a-musing https://github.com/pwardle/not-a-mused/blob/main/README.md what Wardle comically named the finding .