Meta's Muse AI Agent Hit by Zero-Day, Human Call Centers, and Amazon Block
Days after launch, Meta's Muse assistant faces a patched hijack flaw, a fresh hidden-setting backdoor risk, a quiet human call-center workaround, and a shopping ban from Amazon.
Part of a larger narrative
Meta's AI Trademark Collision
- Meta's Muse AI Agent Hit by Zero-Day, Human Call Centers, and Amazon Blockyou are here
- Meta's new AI agent Muse claims rock band Muse's social media handles
- Meta launches Muse AI agent; shares jump on Wall Street bet
What to know
- Muse launched with sweeping permissions to act on users' files, messages and finances, and within days drew a patched zero-day plus a newly reported hidden-setting flaw that could turn it into a backdoor.
- Amazon blocked Muse from shopping on its site over unauthorized access, while Shopify and PayPal moved the opposite direction, integrating Muse into checkout — a split over who controls agentic commerce.
- Reuters found Meta quietly routing some Muse phone calls to human call-center workers, a practice internal staff warned risked leaking private user data and undercutting Meta's AI marketing.
- By September 23, coverage had widened into stock-market jitters (a Schwab selloff tied to AI disruption fears) and broader analysis questioning how much power Muse gives Meta over users' autonomy and data.
The dispute Whether Muse represents a genuine, monetizable leap in AI utility worth its security and privacy tradeoffs, or overhyped infrastructure spending papering over thin real-world use cases. · positions read across 146 posts and comments
Muse's usefulness is overstated and doesn't justify Meta's massive capex or the hype around it.
-
“Convincing people who use IG (and) ... completely misreads the actual financials ... Direct AI monetization is still a tiny rounding error compared to that ~$140B on hardware and infrastructure.”
interwebzdotnet · Reddit ↗
Muse's permissions and design pose serious privacy and security risks.
-
“The internet of things is shit. GenAI/LLMs just makes it worse.”
pecunium.bsky.social · Bluesky ↗
Meta's AI push, including Muse, is a legitimate business shift and the stock reflects it, not hype.
-
“It may be promoted but not a scam. We are in the early midst of some major feature releases from meta. There’s a reason why the stock has been on fire for a month.”
BackendSpecialist · Reddit ↗
Amazon's block is about protecting its retail relationship (disintermediation), not genuine security concerns.
-
“Amazon's concerns here aren't technical. It's entirely about being disintermediated.”
wdr1 · Hacker News ↗
“Meta says it issued a fix for the Muse zero-day vulnerability that would have let attackers do “whatever” they wanted on a victim's Mac, highlighting the inherent dangers of AI helpers.”
Meta / Wired, company statement via reporting · Wired ↗ · Sep 22
Meta Creator of Muse AI assistantAmazon E-commerce platformTobi Lütke (@tobi) Shopify CEOPayPal Payments companyUnnamed Meta employee(s) Internal critic
How it unfolded 8 developments, newest first · click a bar or a number to jump articlesvideospostscomments
-
8
Backlash widens; markets react and a new backdoor flaw surfaces
WSJ and CNBC reported growing consumer backlash and market ripple effects, including a selloff in Charles Schwab shares tied to AI disruption fears, while a separate report disclosed a hidden Muse setting that could let malware reroute dictation and steal session tokens.
-
first by Mastodon, 16h ago · also The Hacker News
-
"Once again, a core feature of a major piece of AI technology will actually just be people working in a call center." https://www. 404media.co/meta-tests-muse-ai -agent-calls-that-are-actually-made-by-humans-in-a-call-center/
2 more of the top 3 · 15 posts in this stretch
-
M
arstechnica.com/security/202... Meta says it issued a fix for the Muse zero-day vulnerability that would have let attackers do “whatever” they wanted on a victim’s Mac, highlighting the inherent dangers of AI helpers.
-
The point was this is the 2nd capex cycle. The 1st not being successful doesn't mean the 2nd won't. N=1 is not a "sigfig sample size" in any statistical sense, that's a personal opinion. Where in anything was there any sensitivity? If pointing out objective facts feels hostile to you, that’s on your end. Furthermore, I didn't even bring up…
-
-
7
Reuters reveals Muse calls secretly routed to humans
Reuters reported Meta was testing a 'human concierge' feature in which contractors quietly handled some phone calls placed via Muse, a practice internal posts showed employees worried could leak private information and generate negative press.
“It's baffling to me why we think this feature is worth the risk. We are one bug away from unnecessary information being leaked to human callers.”
— Meta employee (internal post) -
first by Investing.com News, 1d ago · also Reuters, Channel News Asia
1 more headline
-
🦔404 Media reports that Meta's AI agent Muse, which executives promoted last week as able to make phone calls to businesses on your behalf, is routing some of those calls to human beings in call centers. Internal communications show Meta told employees it "added a human agent
2 more of the top 3 · 22 posts in this stretch
-
C
“.. It's baffling to me why we think this feature is worth the risk," one employee wrote in an internal post. "We are one bug away from unnecessary information being leaked to human callers." @reuters.com $META
-
I am shocked that Meta doesn’t understand consent. Shocked I tell you. https://www. inc.com/jason-aten/metas-new-m use-ai-agent-read-my-private-messages-i-never-asked-it-to/91408202
-
-
6
Meta patches the Mac zero-day
Meta issued a fix for the Muse vulnerability, which it acknowledged would have let attackers do essentially anything on a victim's Mac.
“would have let attackers do “whatever” they wanted on a victim's Mac…”
— Meta -
3 outlets first by Gizmodo, 2d ago · also Malwarebytes, Tech Times · read ↗
-
first by Wired, 14h ago
-
Get the most important and interesting news from the global economy delivered to your inbox. https:// qz.com/shopify-meta-muse-ai-ag ent-shop-pay-checkout-092226?utm_source=flipboard&utm_medium=activitypub Posted into Business News @ business-news-quartz
1 more of the top 2 · 3 posts in this stretch
-
A
TechCrunch AI: Meta's Muse Gains Traction Despite Amazon Blacklist and Security Vulnerabilities Link: https://techcrunch.com/2026/09/21/metas-muse-is-outpacing-chatgpts-early-mobile-launch/ | Context:
-
-
5
Researchers disclose a critical Muse zero-day
Security researchers found a serious zero-day in Muse's Mac app that could let a simple ClickFix attack completely hijack the agent, exploiting its extraordinarily privileged access to a user's system.
-
first by HN Frontpage, 1d ago · also Ars Technica, Ars OpenForum
-
first by Unite.AI, 2d ago · also Cyber Security News
1 more headline
- Meta's Muse AI Agent 0-Day Vulnerability Allows Attackers to Hijack the Tool and Inject Malware Cyber Security News · 2d ago
-
A
Zuck's ai assistant “Built from the ground up for privacy and security” is, like expected everything but that..
2 more of the top 3 · 19 posts in this stretch
-
S
🚨 AI News | TestingCatalog (@testingcatalog) Meta와 Shopify가 연계되어 Muse 에이전트가 Shopify 스토어에서 Shop Pay를 사용할 수 있게 됐습니다. 지원 국가에서 에이전트 기반 구매 흐름을 결제까지 연결하는 통합으로, Facebook·Instagram의 소상공인 판매 채널까지 확장될 경우 커머스 에이전트 생태계에 영향을 줄 수 있습니다. https:// x.com/testingcatalog/status/21 02159389104775633 # meta # shopify # agenticcommerce # payments # aiagents
-
It may be promoted but not a scam. We are in the early midst of some major feature releases from meta. There’s a reason why the stock has been on fire for a month. And the only negative opinions I’ve found in this post are people who never used, let alone understands, Muse. Also, the post is ignoring the fact that meta now has subscription…
-
-
4
Meta deepens agentic checkout with Shopify and PayPal
Even as Amazon shut Muse out, Meta expanded agentic commerce, partnering with Shopify to enable Shop Pay checkout on all Shopify stores and with PayPal for checkout across its merchants.
“We are excited to announce we are partnering deeply with Muse to enable agentic checkout with Shop Pay on all Shopify stores…”
— @tobi (Shopify CEO) -
5 outlets first by WSJ, 2d ago · also Quartz, Neowin, WSJ US Business, The Paypers · read ↗
-
We are excited to announce we are partnering deeply with Muse to enable agentic checkout with Shop Pay on all Shopify stores, offering people an easy and delightful way to shop and check out with Muse.
2 more of the top 3 · 60 posts in this stretch
-
C
(Bloomberg) - Amazon.com Inc. has blocked Meta Platforms Inc.’s new artificial intelligence agent from its retail site after the social media company declined a request to remove the bot. @bloomberg.com $AMZN $META
-
Sure Muse might look pretty solid to some, as it has a true background agent running to handle email, travel bookings, and scheduling is a cool piece of tech. But calling Meta an "AI monetization success" right now completely misreads the actual financials They currently sit on a ~$140B CapEx budget and that sure as hell isn't being at all…
-
-
3
Amazon blocks Muse from shopping on its site
Amazon barred Meta's Muse agent from making purchases on amazon.com, citing unauthorized access and privacy concerns, after Meta declined a request to remove the bot.
-
24 outlets Meta's New ‘Personal AI Agent’ Muse Beats ChatGPT in Downloads - and Get Blocked by Amazon
first by Slashdot, 2d ago · also The Information, MediaPost, SiliconANGLE, NTD, PaymentsJournal, RuntimeWire +17
27 more headlines
- Meta's Muse Tries (and Fails) to Disrupt Amazon The Information · 2d ago
- Amazon Blocks Shoppers From Using Meta's Newest AI Agent MediaPost · 2d ago
- Amazon blocks Meta's Muse agent from shopping on users' behalf SiliconANGLE · 2d ago
- Amazon Blocks Meta's Muse AI From Online Store NTD · 2d ago
- Amazon Blocks Meta's AI Shopping Agent PaymentsJournal · 2d ago
- Amazon blocks Meta's Muse AI agent from shopping on its store RuntimeWire · 2d ago
- Meta's Muse AI Blocked from Completing Amazon Purchases iPhone in Canada · 2d ago
- Amazon Blocks Meta's New AI Agent from Shopping Its Store PCMag · 2d ago
- Amazon Blocks Meta's Muse Over Privacy and Unapproved Shopping Access Techstrong.ai · 2d ago
- Amazon Blocks Meta's Muse Shelly Palmer · 2d ago
- Amazon Blocks Meta's Muse Shopping Agent 12 Days After Launch Implicator.ai · 2d ago
- Amazon Brings Down the Hammer on Meta's Muse AI Agent Gizmodo · 2d ago
- Amazon Bars Meta's Muse AI Agent From eCommerce Marketplace PYMNTS · 2d ago
- Amazon blocks Meta's Muse AI agent from shopping on its site Quartz · 2d ago
- Amazon Blocks Meta's Muse Agent From Shopping — And Signals a New Tollgate for Agent Commerce Forkast · 2d ago
- Amazon blocks Meta's Muse AI agent over unauthorised access to its shopping platform: Report Digit · 2d ago
- Amazon Blocks Meta's Muse Agent The Information · 2d ago
- Amazon blocks Meta's Muse AI agent from checkouts Neowin · 2d ago
- Amazon says it blocked Meta's Muse AI assistant from accessing Amazon.com to shop on users' behalf, citing ToS violations, security risks, and merchant consent GeekWire · 2d ago
- Amazon blocks Meta's Muse AI agent from shopping Mashable · 2d ago
- Amazon blocks Meta's AI shopping bot Muse, citing terms of use violations ET CIO · 2d ago
- Amazon blocks Meta’s Muse AI agent The Verge · 2d ago
- Amazon doesn’t trust Meta’s Muse AI agent Mastodon · 2d ago
- Amazon bars Meta's Muse AI from shopping on its site Engadget · 2d ago
- Amazon Locks Out Meta’s Muse in Agentic Shopping Standoff Adweek · 2d ago
- Amazon shows Meta's Muse AI shopping agent the door The Register · 2d ago
- Amazon blocks Meta's AI agent Muse from online shopping The Decoder · 2d ago
-
11 outlets first by Business Insider, 2d ago · also Seeking Alpha, Axios, Bloomberg, Ad Age, The Economic Times, Yahoo Finance +4 · read ↗
-
S
TL;DR: Amazon has blocked Meta's Muse AI agent from making purchases on its platform, citing violations of its Conditions of Use. Users received alerts that continued access by the unauthorized AI agent is prohibited. https://www. theverge.com/tech/998078/amazo n-blocks-meta-muse-ai-agent-shopping # law # tech # legaltech ⚖️ 🤖 # autosum
2 more of the top 3 · 7 posts in this stretch
-
The knife fight already took place; it ended a year ago, when I wrote the first entry in my Agentic commerce is a mirage series. Amazon began blocking agents last July; it's currently *suing* Perplexity over autonomous shopping with Comet. Amazon won't capitulate; it doesn't have to. Alexa for Sho...
-
F
“I do see [Muse] as a continued trajectory of [Meta's] main business model of controlling what people see, putting ads in front of them, and collecting more data,” https://www. wired.com/story/metas-muse-is- better-at-surveilling-than-helping-me/ # pressquote
-
-
2
Reviewers flag Muse's surveillance and consent problems
Early reviews said Muse nudges users to share bank, email and passport details and continues Meta's pattern of opting users into data collection for AI training; a follow-up review said it read private messages the user never asked it to.
-
first by Daring Fireball, 1d ago
-
D
I will never let any Zuckerberg product access or control my computers. I will never forget Cambridge Analytica, or the more recent revelation that Facebook makes a lot of money off fraud, so they've decided not to stop it.
2 more of the top 3 · 3 posts in this stretch
-
S
Meta's Muse app continues Meta's trend of opting users into data collection for AI training and is better at surveilling than helping me. Source: WIRED https://www. wired.com/story/metas-muse-is- better-at-surveilling-than-helping-me/ # AI # Meta
-
A
What a surprise! After the Cambridge Analytica scandal, various subsequent scandals, and the quick disintegration of the Metaverse, Meta's nosy devices give it a dream world (of surveillance and data collection.) Wired: Meta’s Muse Is Better at Surveilling Than Helping Me https://www. wired.com/story/metas-muse-is-…
-
- 1 day quiet
-
1
Meta launches Muse AI agent on Mac
Meta rolled out its Muse AI assistant to Mac, giving it the ability to work with a user's files and apps and take actions on their behalf.
-
2 outlets first by Retail Dive, 1d ago · also Daring Fireball · read ↗
-
2 outlets first by The Mac Observer, 5d ago · also 9to5Mac · read ↗
-
O
「MetaのMuseがMacに登場、AIがコンピュータ上でアクションを実行可能に 」: # TechClunch 「Meta社の新しいAIアシスタントアプリ「Muse」が Macで 利用可能になりました。 Macでは、Museはファイル、メッセージ、カレンダー、メモ、メールなど、それぞれのネイティブアプリケーション内で操作できます。 この 新しいアプリは 、今月初めにモバイルとウェブでリリースされ、すぐに 米国のApp Storeランキングでトップ に躍り出たMuseに続くものです。 他のプラットフォームと同様に、MuseがMac上でアクセスできる情報には、オプトイン方式で制御できます。さらに、アプリは機密性の高い操作を実行する前に必ずユーザーの承認を求めるとMetaは述べています。 」…
2 more of the top 3 · 17 posts in this stretch
-
meta muse is almost #1 in the app store because it's saving you $1000s, making you $1000s and automating away all the laborious tasks like filling out documents, filing records, managing support tickets, researching insurance... meta realized the killer ai product is just one that gets shit done wi...
-
A
TechCrunch AI: Agentic AI Agents Go Mainstream: From Calls to Smart Home Control Link: https://techcrunch.com/2026/09/17/rival-ai-agents-instinct-and-metas-muse-both-add-the-ability-to-make-calls/ | Context:
-
Also covered reported alongside — the timeline has no entry for these yet
-
first by Seeking Alpha, 5d ago · also Business Insider, The Mac Observer, TipRanks Financial, Proactive
6 more headlines
- Meta AI app beats ChatGPT, Grok to become top iPhone app Moneycontrol.com · 5d ago
- Meta's personal AI agent Muse soars to the top of the App Store businessinsider.com · 5d ago
- Meta Muse Becomes the No. 1 Free iPhone App, Ahead of ChatGPT The Mac Observer · 5d ago
- Meta's Muse Passes ChatGPT to Become No. 1 App in U.S. App Store TipRanks Financial · 5d ago
- Meta's Muse tops Apple's US free app chart Proactive · 5d ago
- Meta's personal AI agent Muse climbs to No. 1 among free apps on Apple's US App Store, ahead of ChatGPT; Muse launched on September 8 Business Insider · 5d ago
-
first by The Globe and Mail, 1d ago · also Investing.com News, Reuters, Channel News Asia
1 more headline
- Wall Street expects Meta’s AI agent to shape into a new revenue engine Investing.com News · 1d ago
-
first by Yahoo, 4d ago · also Yahoo Finance, 24/7 Wall St., Pluang
2 more headlines
- The AI Agent Wars Just Got Personal: Google’s CC vs. Meta’s Muse Yahoo Finance · 3d ago
- Google's AI agent outperforms Meta's Muse in va... Pluang · 3d ago
-
first by Bloomberg Tech, 2d ago · also Quartz, PetaPixel
2 more headlines
-
first by Investor's Business Daily, 6d ago · also Barron's, Barron's Online
1 more headline
-
first by MarketWatch, 1d ago · also Platformer
1 more headline
- Muse is having a moment Platformer · 1d ago
-
first by CNBC, 1d ago · also WSJ Markets
1 more headline
- Meta’s Muse Comes for Financial Stocks WSJ Markets · 1d ago
-
first by Daring Fireball, 1d ago · also 9to5Mac
-
first by Mastodon, 1d ago · also 404 Media
-
first by Investing.com India, 1d ago · also Investing.com Canada
and 31 smaller pieces
What people are saying 15 voices from 5 sites · best of 146 · verbatim
- Does anyone have any meaningful use cases that have actually improved your life in some measurable way?
- Today
-
I
Meta Launched an AI Agent That Shops for You, and Amazon Is Furious Meta's new personal assistant Muse can browse online stores, compare prices, and buy items without human input. Amazon says it crossed a line, setting up a fight over who owns the online checkout.... Read more: https:// imtechboss.com/post.html?id=me…
- Yesterday
-
You definitely pivoted lol. Your entire opening argument was that Amzn blocked Muse, and ebay blocking Muse meant Meta’s agent would be dead everywhere outside fb and ig, which you only said because you dismissed Shopify as practically nonexistent. whether muse generates revenue, that remains to be seen Obviously. Monetization always follows…
-
R
LoL: "“Muse doesn’t just dial a number. It calls a business on your behalf, handles the conversation, completes your request, and reports back with a transcript and a summary,” the internal message board post to employees, seen by 404 Media, reads. “It also no longer works alone. Muse is now able to hand requests to a trained human agent, who…
-
Speaking as an insider who was around through the whole metaverse period, culturally these are very different. No one really seemed to have a clear idea what the goal of the metaverse was, and there were large swaths of the company that seemed to just be floundering to create something. The hardware was cool, the software around it had very poor…
-
C
“.. the most useful A.I. app I had ever used. .. I connected my credit cards to Muse and .. it spun up .. rows of data each in minutes, then flagged two duplicate subscriptions, which it canceled for me.” @nytimes.com $META
-
Yes, that means just what you think it does. From the article: , opens ne has been testing a “human concierge” for its new personal AI assistant, Muse, which entails having human contractors quietly handle some of the phone calls placed via the digital agent, according to internal company posts seen by Reuters. Meta has been testing a “human…
-
P
The internet of things is shit. GenAI/LLMs just makes it worse.
-
We're excited to partner with @Meta to enable PayPal customers to seamlessly shop and check out using their @Muse personal AI agents across PayPal merchants worldwide.
-
D
Amazon.com basically just announced... "Attention shoppers! Bots are better at buying stuff from our site than you are, because deceptive UX and paid boosts. Maybe you don't want to run the Meta bot, but you're going to do better with some kind of bot on here." https://www. mediapost.com/publications/art…
- Sep 21
-
Meta ❤️ Shopify Muse agent can now use Shop Pay on Shopify stores, enabling agentic shopping in countries where Muse is supported. It is hard to imagine how huge the agentic shopping market will be in a few years, given that small businesses on Facebook or Instagram will soon
-
Everyone is bringing up ads or lock-in, but there's another reason companies (beyond Amazon) are going to be squeamish about allowing AI agents to make purchases:The return rate for AI-purchased products is probably much higher than when a human reviews the page and makes the decision. There are going to be a lot of returns ranging from "I didn't…
-
I don't care about Meta even one bit so more power to Amazon. At the same time, Amazon is going downhill at an alarming rate. Is anyone else annoyed by the no name brands flooding every product listing there? There is no way to even enunciate the freaking names! How am I supposed to trust them?The other issue is overpromising delivery times and…
-
The right way to do this is to create an API or MCP or whatever catering to bots, and implement corresponding terms in your legal agreements (i.e. after approving a bot to interact with us, you're responsible for purchases it makes), along with some limits to prevent runaway shopping when Muse decides to binge.Less friction = more shopping = more…
-
There's a difference between automated industrial scale scraping and well-behaved agents acting on the behalf of individuals. Right now there isn't a robust, standard way to distinguish between them, so sites just block known datacenter IPs and throw out the baby with the bathwater.That's a main advantage of running your own local claw setup using…
-
JUST IN: Amazon blocks Meta’s Muse AI agent from shopping on behalf of users, citing unauthorized access and privacy concerns.

