Artificial Intelligence Meta Launches Personal AI Agent, Muse, Emphasizes Safety and Privacy Muse runs on a dedicated, secure virtual machine that houses both the agent and the user’s data. By Associated Press | September 9, 2026 (8:00 AM ET) Flipboard Reddit Whatsapp Whatsapp Email Meta launched on Tuesday a personal artificial intelligence agent, Muse, for people 18 and over who are looking for help with day-to-day tasks like schedules, shopping and, in the company’s words, turning “long-term goals into action plans.” The parent company of Instagram and Facebook is stressing the safety and privacy features of the agent, which for now is only available in the U.S. Muse , Meta said, runs on a dedicated, secure virtual machine that houses both the agent and the user’s data. People can message the agent in a separate app, called Muse, or message it in WhatsApp. It can handle simple tasks like sending an email or booking travel, or bigger, long-term goals like creating a yearlong exercise plan or setting up a new business. “Once a person shares a goal with Muse, it helps them develop a personalized plan and coordinate their time and resources, then advances the work on its own. It can open a browser, fill out forms, and negotiate on their behalf,” Meta said in a blog post. Tech companies are touting AI agents as the next step after chatbots, which can answer questions and retrieve information but won’t take action on the user’s behalf. At its most basic level, an AI agent works like a traditional, human-crafted computer program that executes a job, like launching an application. Combined with an AI large language model, however, it can search for knowledge that enables it to complete tasks without explicit, step-by-step instructions. That means, instead of just helping you draft the language of an email, it can theoretically handle the whole process — receiving a message from your coworker, figuring out what you might want to say, and firing off the response on its own. Advertisement. Scroll to continue reading. For Meta, the agent fits into CEO Mark Zuckerberg’s vision of AI superintelligence that’s available to “everyone.” He outlined his vision last month in a 6,500-word essay published online. In the document derided by critics as fantastical, Zuckerberg said his company is working toward an era where everyone will have the tools to create new businesses, receive Ph.D.-level tutoring and provide personalized lifestyle tips. “Everyone will have an exceptionally capable personal agent that understands you, your goals, and everything you care about. Your agent will work 24/7 on your behalf to improve your relationships, health, career, finances, home management, hobbies, and more,” Zuckerberg wrote. “It will free up time for the things you enjoy, and help you accomplish more than you could otherwise.” Related : The Hidden Instructions That Can Hijack AI Agents Related : Meta AI Hacked External Systems During Cybersecurity Testing Related : Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering Written By Associated Press Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights. More from Associated Press Party’s Over for Crypto Scammers Who Went on a Spending Spree After a $240 Million Bitcoin Theft Nvidia Is Buying AI Platform Hugging Face for $13 Billion Judge Says Pentagon’s Measures Against Anthropic Were ‘Illegal and Baseless’ Pro-Russian Hackers Claim Responsibility for Major Cyberattack on Norway’s Public Digital Services Taiwan Charges 9 Over Illegal AI Server Exports to China, Including Nvidia and Super Micro Staff Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts TikTok Reaches $400 Million Settlement With US Justice Department Over Children’s Privacy AI-Assisted Tool Helped Secure Satellite Communication System After 2022 Russian Hacking Latest News US Agencies Warn China Is Systematically Extracting Frontier AI Capabilities ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws Ivanti Patches Critical Flaws Across Enterprise Security Products New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser This Key Will Self-Destruct: An Open Standard for Revocable API Keys Chrome 153 Patches Seventh Zero-Day of 2026 Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day Trending Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts. Virtual Event: Attack Surface Management Summit 2026 September 16, 2026 Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs. Register Webinar: Minimum Viable Business: Can You Prove Your Organization Would Recover? September 2, 2026 In this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk. Register People on the Move Frank Verdecanna has been appointed Chief Financial Officer at Armadin. Keeper Security has named Jessica Krowel and Bill Grabner as SVPs of sales for North America. Skyhigh Security has named Anthony Palladino as Chief Operating Officer. More People On The Move Expert Insights This Key Will Self-Destruct: An Open Standard for Revocable API Keys Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default. (Matt Honea) What the Hugging Face Incident Teaches Security Leaders About AI Agent Access Security teams must treat autonomous agents as highly privileged identities. (Etay Maor) The Future of AI-Driven Security Depends on Complete Data For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality. (Danelle Au) The MFA Identity Trap: When Authentication Creates a False Sense of Security Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop. (Torsten George) Silent Patches Don’t Stop Attackers – They Blind Defenders Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk. (Tod Beardsley) Flipboard Reddit Whatsapp Whatsapp Email