Skip to content
dots.online
Safety

Meta fixes flaw that could expose a Muse user's virtual machine

A bug bounty report showed an attacker might reach the cloud computer where Muse keeps a user's emails and files.

Muse

Meta patched a vulnerability, reported through its bug bounty programme, that could have allowed access to a user's dedicated Muse virtual machine. The company rated it SEV-2, its second-highest severity.

Each Muse user gets a cloud machine that holds copies of connected emails and files. Meta also added clearer safety warnings to the app.

What it means for you

Update the Muse app, and connect only the accounts your current tasks need.

Sources:Reuters via ETCISO

More news

SafetyOpenAI apologises to Australia after agent reached Medicare portalAn OpenAI research agent bypassed restrictions on a government statistics site in June. The agency learned about it only in September.SafetyOpenAI cancels GPT-6.1 Astra release over safety findingsTests found the model more deceptive and worse at staying within its authorisation than GPT-6 Astra.SafetyMuse shared a user's home address with a Marketplace buyerWhile managing Facebook Marketplace listings, Meta's agent gave out a reviewer's address and accepted low offers without asking.