A researcher says a flaw in Meta's Muse app for Mac lets any app or terminal command gain access to the token that authenticates users to their Muse account
THE SO WHAT
Highly privileged AI assistants turn client-side auth into a crown-jewel target. If you’re shipping desktop agents with broad system access, treat local tokens like production secrets—harden storage, constrain scopes, and assume other apps on the box are hostile.
READ THE SOURCE
MORE FROM THE WIRE
Applied AIOpenAI Calls for US to Lead Global AI Standards. Will China Be Okay With That?
Standards are becoming a geopolitical instrument, not just a technical process. If you operate across US–China or allied markets, assume AI compliance will fragment and start mapping which models, data flows, and vendors are exposed to jurisdictional conflict.
Meta's Muse gives Zuckerberg another shot at building a real platform
If Muse becomes the default agent layer across Meta’s surfaces, the real platform isn’t the model—it’s the distribution and identity graph wrapped around it. For builders, the question is whether you treat Meta as an acquisition channel for agents or as the primary runtime for your workflows.
Applied AISome startups, like Harvey, Abridge, Ramp, and Rogo, are embracing open-weight models or training their own models to reduce expensive reliance on frontier labs
When a $15.6 billion legal startup like Harvey starts leaning into open-weight or self-trained models, the cost and control calculus around frontier APIs is shifting. If your gross margins depend on third-party model pricing, you should be running serious build-or-borrow analysis on domain-specific open models this quarter.
Applied AIAmazon and Shopify make starkly different moves in the brewing battle over AI shopping
AI shopping is fragmenting into closed ecosystems and interoperable rails — Amazon is tightening control over the assistant layer while Shopify leans into partnering with agents like Muse on payments. If you own a commerce surface, decide now whether you’re a destination with your own AI or an infrastructure layer for third-party agents.