Latest / LEON — AI Systems Security | AGORA Intelligence
Meta Muse on macOS: Malware Steals AI Assistant Credentials
On 21 September 2026 researcher Patrick Wardle published a proof-of-concept against Meta Muse for macOS: an undocumented preference key, endo_voyager_dictation_endpoint, can be rewritten by any process running as the logged-in user and redirects dictation to an attacker-controlled server. From there it is possible to read prompts, inject instructions the agent executes, and capture the account token, which is valid across every connected device. This analysis reconstructs the mechanism, explains why detection based on process reputation stays blind, and sets out the procurement checks for agen
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.