Meta says it has resolved an issue following reports that Ray-Ban Meta smart glasses recorded and transcribed conversations without users saying “Hey Meta” or knowing recording had begun. One owner reported unexpected recordings across three pairs of glasses after a firmware update, despite having “Respond without Hey Meta” disabled. Other commenters described similar unexplained activations, although the reports do not establish how widespread the problem was.
The behavior raises privacy concerns for wearers and bystanders, particularly where glasses are used around confidential workplace conversations. Meta has not publicly explained the cause, the number of affected users, or what happened to the captured audio. Users can review and delete voice-interaction logs through settings; recommended precautions include checking voice history for unexpected recordings, reviewing activation settings, and keeping the glasses and companion app updated.

See affected versions and whether adversaries are exploiting it.
3 events from the most recent confirmed update back to the earliest known activity.
Meta told Android Authority that the issue had been resolved and said users could review and delete Meta AI voice logs through settings. The company did not publicly explain the cause, the number of affected users, or what happened to the captured audio.
According to the Reddit owner, Meta Support recommended disabling microphone and camera permissions, turning off Wear Detection, deleting voice history, and disabling automatic updates. These restrictions would limit much of the glasses’ core functionality.
Owners reported discovering recordings and transcripts of conversations captured without saying “Hey Meta.” One Reddit user reported the behavior across three pairs after a firmware update, including with “Respond without Hey Meta” disabled; the update was not established as the cause.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcemalwarebytes.com
Open sourcereddit.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.