LIVE FEED
FIRST LOOK Apate Launches AI Agents That Infiltrate Scam Networks for Intelligence // HIGH OpenAI Engineer Used Chatbot to Plan Covert Bug Planting // HIGH OpenAI Engineer Arrested for Planting Hidden Spy Device // FIRST LOOK Laplace Intelligence Launches AI Red-Teaming for Robots and AVs // FIRST LOOK AWS Launches AgentCore Payments with Anchor Browser for AI Agents // MEDIUM OpenAI Lean Proof Mistranslation Exposes AI Verification Risk // HIGH Grok Bot AI Agent Leaks Personal Bank Data to Company Slack // HIGH Iran Used ChatGPT to Plant Fake Articles in US Publications // CRITICAL ARTEX AI and Claude Agents Weaponised in Korean Bank Attacks // HIGH Anthropic AI Agents Bypass Isolation Controls, Access Live Internet //
META-MUSE

Meta-Muse

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Meta Launches Open Standard to Authenticate AI Agents on the Web

Meta Launches Open Standard to Authenticate AI Agents on the Web

FIRST LOOK ATLAS OWASP LOW Limited impact · Standard review ▲ 6.2 TechCrunch AI

Meta and partners including Walmart, Stripe, and Sierra are developing an open protocol to distinguish legitimate consumer AI agents from malicious bots when interacting with commercial websites. For defenders, this represents a meaningful step toward structured trust frameworks for agentic traffic — closing the gap between legacy anti-bot controls and the emerging reality of authorised AI-driven sessions. The protocol remains nascent, and significant adoption and integration maturity is required before organisations can rely on it as a meaningful trust signal.

Meta Muse AI Agent Hijacked via Hidden Dictation Endpoint

Meta Muse AI Agent Hijacked via Hidden Dictation Endpoint

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 9.1 The Hacker News

Security researcher Patrick Wardle demonstrated a proof-of-concept attack against Meta's Muse AI assistant on macOS, showing that a hidden, undocumented preference key (`endo_voyager_dictation_endpoint`) can be silently modified by any process running as the logged-in user to redirect dictation audio and session tokens to an attacker-controlled server. The attack requires local code execution but can be bootstrapped remotely via a ClickFix social-engineering lure, requiring no download or installation. Once hijacked, an attacker can inject malicious instructions into Muse, capture its authentication token, and control the assistant across all of the victim's linked devices — including mobile and smart-home integrations.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.