A zero-day vulnerability in Meta's Muse allows local attackers to redirect dictation traffic by modifying an undocumented endpoint setting, enabling capture of audio, prompt injection, theft of authentication credentials, and abuse of Muse's elevated access privileges. A proof-of-concept tool demonstrates the attack by intercepting dictated prompts sent to an attacker-controlled endpoint.
ObjGit is a proof-of-concept Git server that stores repositories in object storage like Tigris instead of local filesystems. It supports SSH, HTTP, and Git protocols with post-receive hooks, Prometheus metrics, and bare repository format, though it lacks authentication and has not been extensively tested.