{
  "Event": {
    "uuid": "fee93bed-0101-4974-8-17-8d67ffea8561",
    "info": "One Local Setting Turned Meta's Muse Into a Mac Backdoor — Optimus Labs · Civilizations",
    "date": "2026-09-25",
    "threat_level_id": "1",
    "analysis": "2",
    "published": true,
    "Orgc": {
      "name": "Optimus Labs · Civilizations"
    },
    "Tag": [
      {
        "name": "optimus:briefing=\"meta-muse-dictation-endpoint-hijack\""
      },
      {
        "name": "optimus:severity=\"high\""
      },
      {
        "name": "optimus:type=\"agent-hijack\""
      },
      {
        "name": "optimus:category=\"AI\""
      },
      {
        "name": "optimus:category=\"AL\""
      },
      {
        "name": "optimus:category=\"AP\""
      },
      {
        "name": "optimus:category=\"CH\""
      },
      {
        "name": "type:OSINT"
      }
    ],
    "Attribute": [
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://optimuslabs.io/research/briefings/meta-muse-dictation-endpoint-hijack",
        "comment": "Optimus Labs briefing"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://github.com/pwardle/not-a-mused",
        "comment": "Patrick Wardle: not-a-mused proof of concept"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://www.theverge.com/tech/998679/meta-muse-patch-zero-day-exploit-ai-agent",
        "comment": "The Verge: Meta patches Muse zero-day exploit"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://www.malwarebytes.com/blog/bugs/2026/09/metas-muse-ai-assistant-has-a-zero-day-that-can-turn-it-into-a-mac-backdoor",
        "comment": "Malwarebytes: Muse assistant zero-day analysis"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://thehackernews.com/2026/09/one-hidden-meta-muse-setting-could-let.html",
        "comment": "The Hacker News: undocumented Muse setting"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://arstechnica.com/security/2026/09/muse-metas-extraordinarily-privileged-ai-assistant-has-a-serious-0-day/",
        "comment": "Ars Technica: Muse's privileged assistant and the local 0-day"
      }
    ]
  }
}