Meta's Muse AI assistant for Mac was found to have a serious zero-day vulnerability that has since been patched. Security researcher Patrick Wardle discovered that a hidden setting called endo_voyager_dictation_endpoint could be altered to redirect voice commands to an attacker-controlled server. The flaw would have allowed malicious actors to access files, the camera, and the microphone through the assistant. Meta confirmed the issue and released a hotfix, and now offers a bounty of up to $300,000 for qualifying Muse security flaws.
Wardle demonstrated several attack scenarios using the exploit, which he named not-a-mused. One involved a ClickFix trick that could let remote attackers hijack Muse without installing any software. In another demonstration, he showed that Muse could be forced to write files to disk and take pictures through the camera without alerting the user. The root cause traces back to Muse's cloud dictation design and undocumented settings that any application on the Mac could modify.
On the business side, Nebius held its first capacity auction and cleared 15% above its highest Blackwell price. CEO Arkady Volozh says the company could sell all of its 2027 capacity today if needed. Nebius has major contracts with Meta worth $27 billion and Microsoft worth $19.4 billion, plus a $2 billion NVIDIA equity stake. Q2 revenue hit $582 million, up 454% year over year, though $5.7 billion in capex and $8.5 billion in convertible debt raise concerns about dilution and risk.
Two Canadian AI stocks are drawing attention as Wall Street continues to focus on US mega-cap names. Kinaxis reported Q2 2026 revenue of $158.8 million and gave annual guidance of $625 million to $640 million. Its Maestro platform serves Ford, Lockheed Martin, and Unilever, and profit rose 47.4% in the first half of 2026. OpenText earned $646 million in net income in fiscal 2026, pays a 4.7% dividend, and saw net income grow 47.5%. Both are considered profitable value-and-growth alternatives.
In other AI news, the Biological Computing Company will bring its rat brain-based AI models to Amazon Web Services. The technology handles tasks like image recognition and natural language processing, and the company says the models are accurate enough to lead to breakthroughs in medicine and finance. Meanwhile, Handshake launched a free AI Skills Studio for job seekers, offering personalized project-based missions that take ten to 45 minutes to complete. The platform was built after Handshake acquired Uplimit in June.
Global data centre investment is climbing fast. A PwC report projects spending will grow from $560 billion in 2025 to $1.1 trillion by 2030 and $1.8 trillion by 2050. Romania's Black Sea AI Gigafactory project, worth over €4 billion, aims to strengthen the country's role in European AI. The EU launched a funding programme for seven AI Gigafactory data centres, seeking €30 billion in total investment. The US is expected to attract nearly half of all global data centre spending over the next 25 years.
Key Takeaways
- Meta patched a zero-day flaw in its Muse AI assistant for Mac that let attackers hijack the agent via a hidden setting called endo_voyager_dictation_endpoint.
- Security researcher Patrick Wardle demonstrated that the Muse exploit could access files, cameras, and microphones, and even allowed remote hijacking without installing software.
- Meta offers a bounty of up to $300,000 for qualifying Muse security flaws.
- Nebius's first capacity auction cleared 15% above its highest Blackwell price, with major contracts including Meta at $27 billion and Microsoft at $19.4 billion.
- Nebius holds a $2 billion NVIDIA equity stake and reported Q2 revenue of $582 million, up 454% year over year.
- Kinaxis reported Q2 2026 revenue of $158.8 million and annual guidance of $625 million to $640 million, with profit up 47.4%.
- OpenText earned $646 million in net income in fiscal 2026 and pays a 4.7% dividend.
- The Biological Computing Company will bring rat brain-based AI models to Amazon Web Services for image recognition and natural language processing.
- Global data centre investment is projected to grow from $560 billion in 2025 to $1.8 trillion by 2050.
- Handshake launched a free AI Skills Studio for job seekers, built after acquiring Uplimit in June.
Meta Muse AI assistant has serious security flaw
Meta's AI assistant Muse for Mac has a vulnerability that attackers can exploit. Security researcher Patrick Wardle found that malware can redirect voice commands to a server controlled by an attacker. The flaw involves a hidden setting called endo_voyager_dictation_endpoint that can be changed without extra permissions. This lets attackers access files, the camera, and the microphone through Muse.
Hidden Meta Muse setting enables backdoor attack
Security researcher Patrick Wardle showed that malware on a Mac can take over Meta's Muse assistant. The attack works by changing a hidden setting that controls where voice dictation goes. An attacker can then read user prompts, add fake instructions, and steal login tokens. Wardle also demonstrated a ClickFix trick that could let remote attackers hijack Muse without installing anything.
Meta patches zero-day flaw in Muse AI assistant
Meta released a hotfix for a serious zero-day vulnerability in its Muse AI assistant for Mac. The flaw was in Muse's dictation feature, which sends audio to Meta's servers instead of processing it locally. An attacker with code running on a Mac could redirect dictation traffic and steal user authentication tokens. Security researcher Patrick Wardle discovered the issue before Meta confirmed the fix.
Meta Muse zero-day lets attackers hijack the agent
A zero-day vulnerability in Meta's Muse AI agent allows attackers to hijack the tool and inject malicious instructions. Researcher Patrick Wardle named the exploit not-a-mused and found an undocumented setting called endo_voyager_dictation_endpoint. Attackers must first run code on the Mac, but Muse's broad permissions make this very dangerous. Meta offers a bounty of up to $300,000 for qualifying Muse security flaws.
Meta patches Muse exploit that controls AI agent
Meta issued a patch for its Muse macOS app after a zero-day vulnerability was found. The flaw let attackers take control of the AI agent and use its access to user apps and devices. Patrick Wardle demonstrated attacks that wrote files to disk and took pictures through Muse without alerting the user. The design choices that enabled the flaw include cloud dictation and undocumented settings that any app could change.
Kinaxis and OpenText: Canadian AI stocks Wall Street overlooks
Kinaxis and OpenText are two Canadian AI companies that Wall Street has not yet focused on. Kinaxis sells an AI-powered supply chain platform called Maestro used by Ford, Lockheed Martin and Unilever. Its profit rose 47.4% in the first half of 2026. OpenText offers the Aviator AI suite for managing enterprise information and saw net income grow 47.5% in fiscal 2026.
Kinaxis and OpenText offer rare AI growth opportunities
Wall Street still focuses mostly on US mega-cap AI stocks, but Kinaxis and OpenText are strong Canadian alternatives. Kinaxis reported Q2 2026 revenue of US$158.8 million and expects annual revenue guidance of US$625 million to US$640 million. OpenText earned US$646 million in net income in fiscal 2026 and pays a 4.7% dividend. Both companies are seen as profitable value-and-growth opportunities.
Nebius AI compute auction shows rising pricing power
Nebius held its first capacity auction, clearing 15% above its highest Blackwell price, and CEO Arkady Volozh says it could sell all 2027 capacity today. The company has major contracts with Meta worth US$27 billion and Microsoft worth US$19.4 billion, plus a US$2 billion NVIDIA equity stake. Q2 revenue reached US$582 million, up 454% year over year, but Q2 capex of US$5.7 billion and US$8.5 billion in convertible debt raise dilution and risk concerns.
UiPath stock discount reflects uncertainty over AI role
UiPath sells automation software for office tasks and reported US$1.72 billion in trailing revenue with a 5.1% free cash flow yield. It holds US$1.4 billion in cash and no debt. The stock trades at a 19.5 earnings multiple despite concerns about how AI might affect its own workflow business. In Q2 2027, 18 of its top 20 deals included AI, and annual recurring revenue reached US$1.938 billion.
RBA governor says AI may be a bubble for Australia
Reserve Bank governor Michele Bullock said AI could be a bubble and is not yet making Australia more productive. She said rapid AI investment and datacentre building are adding to inflation rather than economic growth. Bullock also noted house prices have fallen 3.1% over three months and home loan approvals have dropped sharply. The Australian government still expects AI to deliver a profound boost to the economy by 2066.
AI driving massive data centre investment surge through 2050
Global data centre investment is expected to grow from USD 560 billion in 2025 to USD 1.1 trillion by 2030 and USD 1.8 trillion by 2050. The PwC report calls this the largest infrastructure investment cycle in history. Romania's Black Sea AI Gigafactory project, worth over EUR 4 billion, aims to strengthen the country's role in European AI. The EU launched a funding programme for seven AI Gigafactory data centres, seeking EUR 30 billion in total investment. The US is expected to attract nearly half of all global data centre spending over the next 25 years.
Handshake launches free AI training for job seekers
Handshake, a career network for the AI economy, opened its AI Skills Studio for free to all job seekers. The platform offers personalized project-based missions that take ten to 45 minutes to complete. It was built after Handshake acquired the AI learning platform Uplimit in June. The studio aims to help people reskill and upskill to stay competitive in the AI era.
Meta Muse AI agent impresses New York Times reporter
Meta Muse is the first consumer AI agent from a major tech company available to the public. A New York Times reporter tested it for two weeks, using it to handle insurance calls, order groceries, schedule meetings and set fantasy football lineups. The agent can browse the internet, sign into websites and make phone calls on behalf of users. The reporter was surprised by how much easier daily tasks became with Muse.
Synopsys stock faces risk as AI learns chip design
Synopsys sells electronic design automation software used by chipmakers to build new chips. Its stock has fallen 16.3% over the past year while the S&P 500 gained 18.5%. A Needham analyst said investors worry that AI could learn to design chips without Synopsys tools. The biggest risk is that Ansys revenue could mask the threat within headline totals.
Datavault AI faces class action lawsuits
Datavault AI, formerly WiSA Technologies, is under pressure after multiple class action lawsuits were filed in California. The lawsuits claim the company made false statements about its business and financial prospects. Plaintiffs are seeking damages and an injunction against further false statements. The company's stock price has fallen and its market capitalization has decreased. Datavault AI has not yet commented on the lawsuits.
Rat Brain AI Models Coming to Amazon Web Services
The Biological Computing Company will bring its AI tools to Amazon Web Services. The technology uses rat brains to build AI models for tasks like image recognition and natural language processing. This move makes the tools easier for researchers and developers to access. The company says the models are accurate and could lead to breakthroughs in medicine and finance.
Sources
- Meta’s AI agent Muse is vulnerable to attacks
- One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
- Meta Just Patched a Major Zero-Day Vulnerability in Its Muse AI Assistant
- Meta's Muse AI Agent 0-Day Vulnerability Allows Attackers to Hijack the Tool and Inject Malware
- Meta patches Muse exploit that let attackers control the AI agent
- 2 Canadian AI Stocks That Wall Street Isn’t Hyping (Yet)
- 2 Canadian AI Stocks That Wall Street Isn’t Hyping (Yet)
- Here’s What Nebius’ Top Line AI Compute Expansion Means for Prices
- Is UiPath Stock Cheap Because Of What AI Might Do?
- AI could be a bubble and is not yet making Australia more productive, Michele Bullock says
- AI growth set to double data centre investment over five years - PwC report
- Handshake AI Skills Studio: Free AI Training for Job Seekers
- I Gave My Life Over to Meta’s A.I. Agent and Was Blown Away
- What Happens To Synopsys Stock If AI Learns To Design Chips Without It?
- Datavault AI stock faces legal scrutiny after class action filings
- AI Models Built From Rat Brains Just Got Closer to Reality
Comments
Please log in to post a comment.