安全研究人员发现Meta平台应用的Muse存在可能暴露用户敏感数据的安全漏洞后,Meta在Muse中增加了更明确的安全警告。
Meta Platforms added a clearer safety warning in Muse after a security researcher found a vulnerability that could expose users' sensitive data.
该漏洞可能让攻击者访问用户的虚拟机,其中包含个人邮件和文件。Meta将其评为高严重度的SEV-2事件。
The flaw could let attackers access users' virtual machines containing personal emails and files, and was rated as a high-severity SEV-2 incident by Meta.
Muse是Meta新推出的人工智能代理,可执行购物和发送电子邮件等任务。该应用上线后迅速登顶应用商店榜单,两周内下载量约为280万次。
Muse, Meta's new AI agent for tasks like shopping and emailing, quickly topped app store charts with about 2.8 million downloads in two weeks.
人工智能生成内容——美国旧金山:《The Information》9月25日报道称,安全研究人员在这款人工智能代理中发现了一个漏洞,攻击者可能利用该漏洞获取用户的敏感个人信息,Meta平台公司因此在Muse中增加了更明确的安全警告。
AI generated SAN FRANCISCO - Meta Platforms is adding a clearer safety warning within Muse after a security researcher discovered a vulnerability in the AI agent that could let an attacker access a user’s sensitive personal information, the Information reported on Sept 25.
据《The Information》查阅的一份Meta内部事件报告,该漏洞由一名外部研究人员通过Meta的漏洞奖励计划报告,此前并未披露。攻击者可能借此访问用户的专用虚拟机。这是一种基于云端的个性化账户,其中包含电子邮件和文件等数据。
The flaw, reported by an outside researcher through Meta’s bug bounty programme and not previously disclosed, could have allowed an attacker to access a user’s dedicated virtual machine – an individualised cloud-based account containing data including emails and files, according to an internal Meta incident report reviewed by The Information.
报告称,该漏洞最初被列为“SEV-2”。在Meta采用的五级严重程度体系中,SEV-2是第三高级别,通常用于影响重大的安全事件。Meta未立即回应路透社的置评请求。
The vulnerability was initially classified as a “SEV-2,” Meta’s third-highest severity level on a five-point scale, typically used for incidents with significant impact, the report said. Meta did not immediately respond to a Reuters request for comment.
Muse于本月早些时候推出,是Meta的个人人工智能代理,可代表用户执行购物、旅行预订、发送电子邮件和支付等任务。
Muse, launched earlier this month, is Meta’s personal AI agent designed to carry out tasks such as shopping, travel booking, emailing and payments on behalf of users.
近几周,Muse在苹果应用商店和谷歌应用商店的排名中迅速攀升,登顶美国和加拿大的免费应用榜单。市场情报公司Sensor Tower估计,Muse上线首两周的下载量约为280万次。
Muse has rapidly climbed Apple’s App Store and Google Play rankings in recent weeks, topping the free-app charts in the United States and Canada, with market intelligence firm Sensor Tower estimating about 2.8 million downloads in its first two weeks.