Zero-Day in Meta's Muse AI Assistant Exposed User Accounts to Full Takeover

A zero-day in Meta's Muse let any local app or terminal command hijack a user's account by redirecting transcription to an attacker-controlled server. Meta patched it only after disclosure.