Meta's Muse leaked users' secrets through shareable links
Muse exposes users' personal and business secrets when they share conversations
Researchers at security firm Claroc found that Muse, Meta's new AI agent, built shareable conversation URLs with the conversation title in the subdomain, making them discoverable through passive DNS searches. One query surfaced 6,800 links, including a confidential executive-search prep note, a marketing firm's revenue review, a loan application, and a staff vacation calendar. Meta says it has paused the sharing feature while it reviews the report.
If you had asked us beforehand, we would have guessed that gathering these would take real effort. It took one query.