“Meta says it issued a fix for the Muse zero-day vulnerability that would have let attackers do “whatever” they wanted on a victim’s Mac, highlighting the inherent dangers of AI helpers.”
A researcher says a flaw in Meta's Muse app for Mac lets any app or terminal command gain access to the token that authenticates users to their Muse account (Dan Goodin/Ars Technica) Main Link | Techmeme Permalink
The "zero day" is something they call a "ClickFix Attack" Upon Googling "ClickFix": > "A ClickFix attack is a social engineering technique... It typically compromises devices by manipulating victims into copying and pasting malicious comma…
> macOS has long provided a simple means for apps to handle dictation and transcription in processes that stay securely on the device Not sure these guys realize that the quality and latency of those Apple services in MacOS is way lower th…