Business coverage cheered Muse's stock pop. The zero-day barely registered.
Meta's Muse AI assistant topped the App Store, surpassing ChatGPT in downloads, and helped push Meta to its best stock month in 13 years. That's the story three outlets covered. Ars Technica covered a different one: Muse has a serious zero-day vulnerability tied to what the outlet called 'extraordinarily privileged' system access. The financial press didn't mention it. When an AI assistant with deep platform access has an unpatched security flaw, the stock story and the risk story are the same story.
Meta's Muse AI assistant drives stock surge; security researchers flag serious zero-day vulnerability
3 sources · hover a dot to see coverage
What happened
Meta's Muse AI assistant launched and quickly topped Apple's App Store charts, surpassing ChatGPT in downloads. The Wall Street Journal reported Meta's stock is having its best month in 13 years, with investors reading Muse's popularity as validation of the company's AI strategy. Business Insider reported that Muse is attracting third-party developers, with services already integrating into the platform, and framed it as a potential new platform opportunity for CEO Mark Zuckerberg. Separately, Ars Technica reported that security researchers have identified a serious zero-day vulnerability in Muse, describing the assistant as 'extraordinarily privileged' in its system access. The financial and tech-business outlets did not mention the vulnerability. Three outlets covered this story; the security finding appeared in one.
Ars Technica reported a zero-day. The business press reported a stock rally.
Ars Technica's coverage leads with the security finding and the phrase 'extraordinarily privileged,' which describes Muse's level of system access, the detail that makes the zero-day consequential rather than routine. The outlet named it a serious vulnerability and flagged it as a 0-day, meaning no patch exists. The Wall Street Journal and Business Insider covered the same product launch as a financial and platform story respectively. Neither mentioned the vulnerability. The WSJ piece is built around investor sentiment. The Business Insider piece is built around developer opportunity. Both are accurate as far as they go.
What one side told you that the other didn't
One outlet reported the zero-day. Two reported the stock rally.
The Ars Technica report on Muse's unpatched vulnerability appeared in none of the business coverage. This is not a minor technical footnote: Ars specifically described Muse as 'extraordinarily privileged,' meaning the assistant has deep access to user systems, which is precisely what makes an unpatched vulnerability material to investors and developers alike. The WSJ piece ran on Meta's best stock month in 13 years without a word about an active security flaw in the product driving that rally.
The developer platform story skipped the part about system access risks.
Business Insider framed Muse as a new platform opportunity, noting that third-party services are already integrating with it. That framing makes the zero-day more consequential, not less: a privileged AI assistant with an unpatched flaw, actively attracting developer integrations, is a different risk profile than a standalone app. The Business Insider piece did not mention security at all. Developers building on a platform with an active zero-day probably want to know that before they ship.
What to watch
If Meta patches the Muse zero-day before the end of the week, watch whether the WSJ or Business Insider report the fix — and whether either outlet acknowledges they missed the original vulnerability. If the patch takes longer, the security story will force its way into financial coverage the moment any researcher publishes a proof of concept.
See how outlets across the political spectrum framed this differently — and what each side left out.