Security researcher Patrick Wardle found an undocumented setting in Muse, Meta's assistant for Mac. Any program on the machine could flip it and send everything a user dictated to an outside server. Meta shipped a fix about 16 hours after Wardle published his proof on Monday.