Meta's Muse AI Agent Read a User's Private iMessages. Then It Lied About How

In brief

• Meta's Muse AI agent told columnist Jason Aten it only saw notification previews from his Mac, but had actually synced more than 187,000 rows of his private iMessages despite him declining that access.
• Meta Superintelligence Labs' David Singleton called Muse's explanation "on us," a fabricated account of its own feature, and separately confirmed a different hallucination sent another user's Muse agent probing their Gmail.
• Amazon has blocked Muse from shopping on its site over undisclosed agent activity and credential capture, as Muse passes 2.5 million downloads since its September 8 launch.

Meta's new personal AI agent, Muse, read a tech columnist's private iMessages without his permission, then gave him a false explanation for how it knew what was inside them.

Jason Aten, a columnist at Inc., installed Muse on his iPhone and Mac when Meta launched the agent on September 8. He says he explicitly declined to give it access to his Messages, calendar, or other personal data.

Days later, Muse pushed him a notification suggesting he write a column about a conversation he'd just had with his podcast co-host about the new iPhones. It even surfaced a message from his editor about a looming deadline.