Meta is testing a “human concierge” in which contractors quietly make some calls placed through Muse. The test reached half of employees and included an opt-out; internal posts seen by Reuters recorded privacy objections because the calls can contain sensitive information. Muse nevertheless passed 2.5 million downloads in two weeks, according to Sensor Tower. Reuters has the human-operations detail.
A separate macOS flaw let malware already on a machine redirect transcription to a hostile endpoint and then steer the agent into actions such as taking photos or writing files. Meta hotfixed it; the local-access prerequisite limits the exploit, but it matters because an agent converts a compromised instruction channel into a bundle of authenticated capabilities. Patrick Wardle’s demonstration and Meta’s response are described here. Wealth managers, travel names and brokerages have traded as if Muse compresses their distribution advantage. The early evidence instead shows an expensive service stack: human exception handling, privacy controls, secure execution and recovery when the command path is poisoned. The interface is impressive; the unit economics and trust perimeter are still being assembled in public.