Good Monday morning, I'm on my second coffee of the day already so please excuse any jitters that come through today's newsletter.
asserted
that → excuse → newsletter
We've got a big constitutionality ruling on Flock, a scoop about a major fire Meta needed to put out pre-Muse launch, and a lot more from trawling the World Wide Web.
asserted
Meta → get → Web
Let's get into it.
asserted
's → let → it
THE BIG STORY
In the immediate weeks before Muse’s launch, Meta engineers found several security vulnerabilities in the company’s viral AI agent product, at least one of which could have allowed malicious users to break outside of Muse’s intended environment and access Meta’s own sensitive databases and services, 404 Media has learned.
uncertain
Media → find → databases
The issues were so severe that they reached Mark Zuckerberg and staff worked overtime to fix them.
asserted
staff → reach → them
These specific vulnerabilities were discovered before the launch of the product but required a multi-team “mad dash” to fix “a sudden spike in reported KVM escapes,” according to an internal post by Meta executives to its core infrastructure team seen by 404 Media.
uncertain
vulnerabilities → discover → Media
In order for Muse to work, a user gives the AI agent access to various important services and accounts that they own.
asserted
they → work → that
On Meta’s end, each individual Muse instance runs on a kernel-based virtual machine, which connects to, but is supposed to be isolated from, Meta’s own critical infrastructure.
asserted
which → run → infrastructure
A “KVM escape” is when, through a security vulnerability, a Muse instance is able to escape from that virtual machine and interact with the system that runs it, or with other users’ virtual machines.
asserted
that → escape → machines
According to a Meta source, as well as internal security documentation and internal posts viewed by 404 Media, at least one of the vulnerabilities could have allowed an outside attacker — that is, a normal Muse user — to access data in sensitive internal Meta databases.
uncertain
that → accord → databases
At least one of the vulnerabilities was related to an exploit found in Linux kernel-based virtual machine code in July.
asserted
one → relate → July
404 Media granted the Meta source anonymity to speak about sensitive security matters.
asserted
Media → grant → matters
In a major first, a federal judge in Oklahoma ruled Thursday that a police officer violated the Fourth Amendment rights of a woman accused of meth trafficking when he searched her license plate in Flock’s automated license plate reader system simply because her license plate was from California, then used her travel history as part of the reason to search her car.
asserted
plate → rule → car
Are you signed up for The Abstract?
asserted
you → sign → Abstract
If not, you’re missing out, and I don’t want any of our readers experiencing FOMO, so check your account settings to make sure you’re subscribed.
asserted
you → miss → settings
In this week’s issue: “Our Solar System Is Terminally Unstable and Will Be Completely Destroyed, Study Finds.”
asserted
Study → destroy → issue
And if you’re looking for a Monday listen, on the 404 Media podcast we get into the massive FBI hack that we broke last week, and how a surveillance company is telling cops it wants to add facial recognition tech to Flock camera data.
asserted
it → look → data
That’s out for everyone today (Supporters got it early!).
asserted
Supporters → ’ → it
Listen wherever you get your pods, or watch on YouTube.
asserted
you → listen → YouTube
FROM AROUND THE WEB
Today in stats that will make you go WTF: The Internet Watch Foundation has found “more photorealistic child sexual abuse material in the first half of 2026 than for the whole of the prior year,” the Guardian reports, thanks to people generating child sexual abuse material using AI tools.
asserted
Guardian → make → tools
The IWF said it assessed 6,310 AI images that met the legal definition of child sexual abuse, which comes in at 40% higher than last year.
asserted
which → say → abuse
In case you missed the memo when experts started sounding the alarm on this when we covered the issue in 2024, AI generated child sexual abuse material is not a “victimless crime.”
asserted
material → miss → 2024
UPS made a video of workers as little kids using AI, and it did not land.
asserted
it → make → AI
As one reply puts it succinctly: Fucking yikes???
asserted
reply → put → it
Norway might ban the pervert glasses.
uncertain
Norway → ban → glasses
The country’s parliament will propose a temporary ban on Meta’s smart glasses in public spaces, including all the common sense spots like schools, pools, doctor’s offices and changing rooms, but also beaches and parks.
asserted
parliament → propose → schools
Lord I see what you do for others...
asserted
you → see → others
I Super Like this report about pay-to-win dating app schemes.
asserted
I → like → schemes
Straight Arrow News reports that some users are “so furious they’ve filed formal federal complaints against Match Group, the publicly traded technology giant that owns the largest dating apps on the market, including Hinge, Tinder and OkCupid.
asserted
that → report → Hinge
As people leave their luck to a for-profit algorithm with subscription fees of up to $600 per year, public records obtained by Straight Arrow show, they’re calling on federal regulators to crack down on a company they accuse of deceptive business practices and algorithmic manipulation.”
I am reading it for the articles.
asserted
I → leave → articles
Former Motherboarder (IYKYK) turned instant New York Times Bestselling Author Brian Anderson has a wild story in Playboy about drug smuggler Ken “Goldfinger” Connell and the world of the Grateful Dead.
asserted
Motherboarder → turn → Dead
Sam Altman said in an interview with Politico that at OpenAI they “believe that the world should accept some bad things happening for the benefits of this technology and people having the agency.”
asserted
things → say → agency
It’s Nobel Prize winner day.
asserted
It → ’ → ?
I wonder if I won.
asserted
I → wonder → ?
The Aporia
