Muse News

by @tabber

OCT 23, 2026

Muse found in half of customer traffic, posing as a plain browser

A new report says Muse poses as an ordinary browser and can complete MFA for users — pushing companies to decide how to safely welcome agents rather than block them.

Reported bysecuritybrief.com.au (opens the original story)

In this brief: 3 sections 2 min read
    • Muse traffic appeared at more than half of the customer environments Cequence studied
    • At the median customer, traffic grew nearly sixfold within about two weeks of first appearing
    • Muse used a real cloud Chrome browser and consumer VPN, detected only via behavioral analysis
    • It signed into financial-institution accounts and completed MFA on users' behalf
    • It searched, compared, filled baskets, and sometimes completed purchases
    • A travel and hospitality customer began blocking nearly one in five Muse requests judged abnormal
    • The rest of the agent's traffic was allowed to continue
    • Cequence's framing: 'block the action, not the agent'
    • Live inventory of AI agents seen in an organization's traffic
    • Verifies agent identity against trusted providers with request-by-request records
    • Can block, rate-limit, or challenge a single action instead of shutting out the session
    • Sensitive account changes can require confirmation on the holder's own device
Read full analysis on securitybrief.com.au ↗
Useful?