Meta released an AI agent Muse that can read emails and make payments, but openly admitted its susceptibility to prompt injection and offered bounties for exploits, raising industry-wide security concerns about AI accessing human-centric systems like email.
Ok so Meta dropped this new agent called Muse this week. It can read your email, book stuff, pay for things. cool idea I guess. But here's the weird part. In Meta's own safety docs, they say straight up that Muse "remains susceptible to adaptive jailbreaks and prompt injection." like... they said this themselves. And then they're offering up to $130k if you can break it with a prompt injection. that's part of a $300k bounty total. This isn't just a Meta problem btw. Claude did something similar a couple weeks back – let it send Gmail emails without asking you first. and right after, people found the same trick: you hide text in an email (like white text on white background, invisible unicode stuff) and the AI reads it even though you can't see it. so someone could hide a command in an email and the bot just does it. Everyone's fix is the same thing tho lock it in a sandbox, add a watcher agent (Meta calls theirs "Sentinel"), block sensitive stuff like OTP codes before the AI even sees them. fine, that helps. but it's all just building a stronger cage around the same problem. the real issue is you're giving an AI access to email that was made for humans to look at with their eyes, not for a bot to follow instructions hidden inside it. I actually work on Atomic Mail Agentic (basically email made for AI agents) and not gonna lie, I don't really get why the whole industry is doing it this way. if the one "reading" the email is an AI and not a person, why is nobody asking if plain text email + OAuth into someone's human inbox is even the right base to build on? honestly not sure if that's just a "get it out fast, worry about leaks later" thing, or if there's some real reason to build it this way that I'm not seeing. is it a cost thing? a "nobody wants to be the one redesigning email" thing? or am I just missing something obvious here. genuinely asking, would love to be wrong
Meta has launched Muse, an AI-powered productivity assistant that handles tasks like email management and shopping, but raises privacy concerns due to its extensive data access.
Meta has released Muse, a personal AI agent for secure digital task automation, available as an app and website with built-in privacy features. It aims to compete with other AI agents by emphasizing user trust and security.
Meta launches Muse, a personal AI agent that handles everyday tasks by integrating with apps, raising questions about consumer trust due to increased data access.
Meta has launched Muse, a personal AI agent designed to assist with everyday tasks like shopping and planning, as part of its strategy to compete with rivals in the AI race. The assistant is free for most users with optional paid subscriptions and emphasizes ease of use and privacy.