Meta Muse share links exposed private conversations, reopened after fix

1. 18:30
   X@AiAdventurerx· Discussion

   Meta pauses Muse chat sharing: Claroc found about 6,800 share links discoverable through passive DNS, with no login nee…(opens the original post in a new tab)
2. 14:29
   X@ipandetec· Discussion

   #Ciberseguridad | Tras promocionar la seguridad y la privacidad de su agente de IA Muse, @Meta ahora está desactivando…(opens the original post in a new tab)

1. 23:07
   X@mark_davis22· Discussion

   Meta's Muse AI assistant exposed private conversations through share links. Researchers found they could enumerate 6,8…(opens the original post in a new tab)
2. 16:49
   X@jantegze· Discussion

   @alexandr_wang Got any thoughts on this? Meta Muse exposes users’ personal and business secrets when they share conver…(opens the original post in a new tab)
3. 05:18
   RedditReddit r/AIDangers· Discussion

   Meta suspends Muse sharing after sensitive documents turn up in shared chats(opens the original post in a new tab)

1. 22:39
   WebIThome (China)· Media coverage

   Researchers found thousands of public Muse chat log sharing links through DNS databases; Meta has fixed it(opens the original post in a new tab)
2. 21:03
   X@kai_ai_days· Discussion

   A step to take as your own matter. For conversations containing names, addresses, amounts, schedules, or internal figures, do not create share links. When you want to show something, copy and hand over only a short summary with proper nouns and numbers removed. With other AIs too, review the contents before sharing. For ones already created, if there is a delete or stop-sharing feature…(opens the original post in a new tab)
3. 21:03
   X@kai_ai_days· Discussion

   Until now it tended to be assumed that "only people who know the link can see it." This time, because of the easily guessable design, the researchers write that it was gathered with 1 query. It has not been reported that other companies' AI chats have the same hole. Still, it is safer to treat shared links as something that will be found…(opens the original post in a new tab)
4. 21:03
   X@kai_ai_days· Discussion

   The act of pressing "share" had become an outflow point for documents. A security company enumerated 6800 share links of Meta's AI app Muse. Among those that could be opened without logging in were loan application details and revenue reviews for the CEO. Meta temporarily suspended the sharing feature, according to Ars…(opens the original post in a new tab)
5. 20:03
   X@mianmian42· Discussion

   Meta's AI assistant Muse has been exposed as having a serious privacy leak vulnerability, with the business secrets and personal sensitive conversations of thousands of users left exposed on the public internet. Meta has now urgently taken the assistant's sharing feature offline and is evaluating changes to the mechanism. The root of the problem lies in the basic network architecture design. Unlike most network services…(opens the original post in a new tab)
6. 07:38
   X@arturnow· Discussion

   Did you share anything through Muse this week? Meta just turned sharing back on — three days after the DNS leak exposed…(opens the original post in a new tab)
7. 04:48
   PrimerTiempo.CO

   Meta pauses Muse content-sharing feature after discovering vulnerability that leaked sensitive information

   Meta's AI agent Muse had a security vulnerability: more than 6,800 pages shared via links could be viewed without logging in, and the company paused the related feature, fixed the vulnerability, and then restored service. Security researchers found the URLs of these pages by querying DNS history; the issue was related to how links were generated and recorded, and involved only some content shared via Muse links, not all users' private conversations being exposed. Among the located pages were potentially sensitive documents such as loan applications, work calendars, corporate revenue reviews, and confidential meeting notes; the researchers said there was no evidence that anyone had maliciously exploited the information. Meta said content shared before the fix has been given new URLs, and accessing old links prompts users to ask the sharer for the updated link.

8. 03:45
   X@MondegreenM· Discussion

   OOPS: A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse https://www.wired.com/story/a…(opens the original post in a new tab)
9. 00:14
   X@John_Dietrich1· Discussion

   Treat any AI chat share link like a public page. Researchers found 6,800 Meta Muse share pages through public DNS, one…(opens the original post in a new tab)

1. 23:00
   X@trendsneural· Discussion

   A Meta suspendeu os links de compartilhamento do Muse após a Claroc encontrar endereços em registros de DNS passivo. O…(opens the original post in a new tab)
2. 22:54
   X@christinayiotis· Discussion

   “The company is suspending the feature after security researchers discovered how easy it was to access sensitive inform…(opens the original post in a new tab)
3. 21:06
   X@museunlocked· Discussion

   Your 3-step safety check: 1. Ever hit 'share' on a Muse chat? That page lived in passive DNS for weeks treat it as pub…(opens the original post in a new tab)
4. 21:06
   X@museunlocked· Discussion

   Correction on the Muse privacy story everyone's getting wrong: your PRIVATE chats were never exposed. Only chats you cl…(opens the original post in a new tab)
5. 20:13
   X@Beebeeb_io· Discussion

   A share link can leak before anyone clicks it. Meta's Muse named shared artifact URLs after their titles, and those na…(opens the original post in a new tab)
6. 18:23
   X@larsnow· Discussion

   Passive DNS turned up 6,800 public links to private Meta Muse chats: loans, calendars, bank alerts. Meta paused sharing…(opens the original post in a new tab)
7. 18:18
   X@swif_ai· Discussion

   Claroc found 6,800+ Meta Muse share links in passive DNS: chat titles and random IDs sat in hostnames, which DNS logs o…(opens the original post in a new tab)
8. 17:37
   X@Semoritao0o· Discussion

   [Muse Sharing Is Back] 📰 Muse's sharing feature went down for a bit and is back on now - Researchers found shared link…(opens the original post in a new tab)
9. 11:57
   X@Howlsoverbaaz· Discussion

   Muse sharing is BACK ON. 🐺 Meta fixed the flaw that exposed shared artifact links in public DNS and turned sharing bac…(opens the original post in a new tab)
10. 07:06
    X@UnbiasedHdlns· Discussion

    Meta Says 10 Million Have Signed Up for Muse as Researchers Report 6,800 Exposed Share Links https://unbiasedheadlines…(opens the original post in a new tab)
11. 05:22
    X@LagoonLabsMv· Discussion

    Meta re-enabled Muse sharing after researchers found shared conversation links exposed in public DNS - sensitive data l…(opens the original post in a new tab)
12. 05:21
    X@ihm185· Discussion

    Meta Muse share links showed up in passive DNS. One query surfaced around 6,800 shared chats, including a loan applicat…(opens the original post in a new tab)
13. 04:40
    WebAI Threat Watch (aithreat.io)· Media coverage

    Meta reactiva Muse tras filtrar 6.800 enlaces compartidos(opens the original post in a new tab)
14. 04:27
    X@verge· Discussion

    Meta has given new URLs to shared Muse ‘artifacts’ after security researchers reported that public links could be easy…(opens the original post in a new tab)
15. 04:24
    The Verge AI

    Meta re-enables Muse sharing

    Meta fixed the link issue with Muse shared artifacts and re-enabled sharing. Researchers at Claroc had previously reported that URLs of Muse shared conversations were named after the conversation title and written into public DNS, making them easy to find; the researchers said they had found pages such as an internal revenue review at a marketing company and a small business owner's loan application; according to Ars Technica, Meta paused the feature after its inquiry. Meta's David Singleton said on X that the problem was with the URLs of shared artifacts such as documents and images within Muse, not a flaw in chat sharing itself, and that it has now been fixed; artifacts shared before the fix have new URLs, and visiting old links shows a notice telling users to ask the sharer for a new link.

16. 03:34
    X@christinayiotis· Discussion

    “Meta is suspending the sharing feature while it investigates its privacy.” https://arstechnica.com/security/2026/10/me…(opens the original post in a new tab)

1. 23:57
   X@ChatbotWise· Discussion

   https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-when-they-share-conversa…(opens the original post in a new tab)
2. 23:57
   X@ChatbotWise· Discussion

   Your private AI chat might be one shared link away from becoming public. Researchers found thousands of discoverable…(opens the original post in a new tab)
3. 23:30
   X@axel_briche· Discussion

   🔗 https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-when-they-share-conver…(opens the original post in a new tab)
4. 23:30
   X@axel_briche· Discussion

   L’IA Muse de Meta a exposé des secrets personnels et business via des liens de partage trop faciles à trouver. Des cher…(opens the original post in a new tab)
5. 23:15
   X@iBadley· Discussion

   Thousands of AI chat links, exposed. Researchers found 6,800+ shared Meta Muse chats in public DNS records; many opened…(opens the original post in a new tab)
6. 21:59
   X@CreativeFirstIN· Discussion

   4. Meta paused Muse’s sharing feature after Claroc found that shared conversations could be discovered through passive…(opens the original post in a new tab)
7. 21:53
   X@venthewise· Discussion

   Researchers reportedly uncovered a flaw in Meta Muse that exposed ~6,800 shared AI conversation links, potentially reve…(opens the original post in a new tab)
8. 20:07
   WebCNA · Technology· Media coverage

   Meta falls as investors balance Muse growth with rising AI costs(opens the original post in a new tab)
9. 18:05
   WebMediaNama (India)· Media coverage

   Meta pauses Muse AI chat sharing after researchers find over 6,800 discoverable links(opens the original post in a new tab)
10. 14:42
    X@Fly_Sistah· Discussion

    including business notes, loan applications, and partial bank-account details. Security firm Claroc published those fin…(opens the original post in a new tab)
11. 14:42
    X@Fly_Sistah· Discussion

    Share a Chat, Leak Your Company Secrets: How Meta Muse Is Broadcasting Your Private Life to the World. One passive-DNS…(opens the original post in a new tab)
12. 14:15
    WebAI Threat Watch (aithreat.io)· Media coverage

    Le nouvel agent IA de Meta, Muse, déjà pris en défaut par une faille de sécurité(opens the original post in a new tab)
13. 14:13
    X@sail1202· Discussion

    2/2 Meta paused the sharing feature after researchers found the chats sitting in the open. Growth first, privacy patch…(opens the original post in a new tab)
14. 14:13
    X@sail1202· Discussion

    1/2 Meta's Muse hit 10 million downloads. Now it's exposing users' secrets. Shared Muse chats were published as public…(opens the original post in a new tab)
15. 08:34
    X@digisoulhub· Discussion

    Shared Meta Muse chats were findable: Claroc found ~6,800 share links in public DNS, since each address included the ch…(opens the original post in a new tab)
16. 08:31
    X@BigVikDada· Discussion

    Claroc found more than 6,800 Meta Muse share hostnames with a single passive-DNS search of http://cf.metaaiusercontent.…(opens the original post in a new tab)
17. 08:00
    X@EntrepreneurRX· Discussion

    Unlisted AI chats are not private. Claroc found 6,800+ Muse share hostnames through DNS records. Its Oct 20 update say…(opens the original post in a new tab)
18. 07:42
    X@zxlie_fehelper· Discussion

    Meta took down Muse's chat sharing feature overnight: 1 A single passive DNS query by Claroc enumerated 6800 sharing links—Muse wrote conversation titles directly into subdomains, effectively turning sharing into a searchable directory. 2 Loan applications, bank fraud alerts (including some account numbers)…(opens the original post in a new tab)
19. 06:52
    X@TonySeruga· Discussion

    🚨 Meta’s AI Shared Chats Ended Up on the Open Web Ars Technica reports that Meta Muse exposed users’ personal and bus…(opens the original post in a new tab)
20. 05:42
    X@genai_toiukoto· Discussion

    These included loan applications and companies' internal data, and Meta has currently suspended this sharing feature. https://blog.claroc.io/ghostshares-muse-passive-dns/ https://arstechn…(opens the original post in a new tab)
21. 05:42
    X@genai_toiukoto· Discussion

    In Meta's Muse, a flaw in the design of URLs for sharing conversations caused a problem in which personal information and corporate confidential information were exposed externally. The structure of subdomains and the like was easy to guess, and more than 6,800 shared links were [found] through passive DNS (DNS history data) searches alone…(opens the original post in a new tab)
22. 05:06
    X@TechFramework· Discussion

    Meta paused Muse sharing after researchers found discoverable links. Claroc reported no evidence of misuse. Business c…(opens the original post in a new tab)
23. 03:05
    X@carsonmarz· Discussion

    The catch is the share button. Security firm Claroc found 6,800 shared Muse chats that were easy to find, and Meta paus…(opens the original post in a new tab)
24. 02:29
    X@itsmaloy· Discussion

    When it's @Meta , you can't trust their taste in #security: conversation links shared as public pages without any secu…(opens the original post in a new tab)
25. 02:15
    X@CosmicUndercurr· Discussion

    Loan applications and company revenue documents appeared on AI sharing pages readable without login. Claroc disclosed in an October 20 update that researchers found more than 6,800 Muse sharing domains and discovered these materials in spot checks. Muse writes chat titles and random IDs into the domains; if third parties record these domains, they can reconstruct…(opens the original post in a new tab)
26. 01:50
    X@BuzzRag· Discussion

    Researchers found thousands of Muse chat-share links through DNS records, and some opened to personal and business info…(opens the original post in a new tab)
27. 01:45
    X@kuriharan· Discussion

    Learn it. Meta Muse exposes users’ personal and business secrets when they share conversations https://arstechnica.com/…(opens the original post in a new tab)
28. 01:41
    X@sokolware· Discussion

    Meta paused sharing in Muse after researchers found more than 6,800 shared chats through public DNS records. The chat's…(opens the original post in a new tab)
29. 01:14
    X@menarawed· Discussion

    Meta Muse Share Links: A Privacy Lesson for IT Meta paused Muse sharing after researchers found shared pages via public…(opens the original post in a new tab)
30. 01:12
    X@AnnieCushing· Discussion

    Meta paused the Muse sharing feature after researchers found the share URLs publicly available on the web, as reported…(opens the original post in a new tab)
31. 00:39
    X@Michael6xu8hb· Discussion

    https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-when-they-share-conversa…(opens the original post in a new tab)
32. 00:33
    X@AsmitSingh54752· Discussion

    https://blog.claroc.io/ghostshares-muse-passive-dns/(opens the original post in a new tab)
33. 00:32
    X@AsmitSingh54752· Discussion

    Meta paused Muse's chat-link sharing after a security firm found ~6,800 'private' conversations discoverable via public…(opens the original post in a new tab)
34. 00:24
    X@RMCholewa· Discussion

    Meta Muse exposes users' personal and business secrets when they share conversations https://arstechnica.com/security/2…(opens the original post in a new tab)
35. 00:21
    WebAI Threat Watch (aithreat.io)· Media coverage

    Meta suspend une fonction de Muse après la fuite de conversations sur Internet(opens the original post in a new tab)
36. 00:00
    X@theneurondaily· Discussion

    Sharing an AI chat shouldn't mean making it easy for strangers to find. 🕵🏻♀ 💬 @Meta's @Muse included conversation ti…(opens the original post in a new tab)

1. 23:58
   X@RoryCrave· Discussion

   GhostShares: A Shared Muse Chat Exposed Prep for a Confidential Call With a Frontier AI Lab Leader https://blog.claroc.…(opens the original post in a new tab)
2. 23:56
   X@RoryCrave· Discussion

   Meta Muse’s “GhostShares” flaw made 6,800+ shared AI links discoverable via DNS. Some exposed sensitive files, no accou…(opens the original post in a new tab)
3. 23:14
   X@Z3nlyte· Discussion

   6,800+ shared Meta Muse chats were discoverable through passive DNS logs: share URLs embed the chat title, so pages get…(opens the original post in a new tab)
4. 23:06
   X@Daily_tech_new· Discussion

   Meta AI Muse exposed personal conversations via share links. A security flaw in Meta's AI assistant, Muse, exposed use…(opens the original post in a new tab)
5. 22:30
   X@DEVOTOMSOLUTION· Discussion

   Meta paused Muse AI chat sharing after researchers rebuilt "private" share links from passive DNS records. Some exposed…(opens the original post in a new tab)
6. 22:28
   X@kamel_laimene· Discussion

   Un lien de partage privé peut fuiter sans que personne ne le transmette. Meta suspend le partage de Muse : le titre de…(opens the original post in a new tab)
7. 22:00
   X@theneurondaily· Discussion

   Muse lets users share AI chats through public links that anyone can open without logging in. But security firm Claroc…(opens the original post in a new tab)
8. 22:00
   X@theneurondaily· Discussion

   @Meta reportedly paused @Muse's chat-sharing feature after researchers found 6,800+ shared chat addresses discoverable…(opens the original post in a new tab)
9. 21:53
   X@babatopeajepe· Discussion

   Meta is suspending the share-link feature on its Muse AI assistant after researchers found a flaw that exposed private…(opens the original post in a new tab)
10. 21:43
    X@Tesla_Optimus_K· Discussion

    Meta suspends Muse chat sharing after private details leaked Meta paused Muse's share-by-URL feature after Claroc foun…(opens the original post in a new tab)
11. 21:27
    X@Fkguo9ari· Discussion

    Meta paused Muse chat sharing after Claroc found 6,800+ share links in passive DNS. The flaw: chat titles were baked in…(opens the original post in a new tab)
12. 21:23
    X@LifanBuilds· Discussion

    6/ Meta paused Muse sharing after Claroc showed DNS hostnames exposed supposedly hard-to-find links. Its Oct 20 recheck…(opens the original post in a new tab)
13. 21:01
    X@TechNowPulse· Discussion

    A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s MuseThe company is suspending the featur…(opens the original post in a new tab)
14. 21:00
    X@sughanthans1· Discussion

    meta has paused muse's share links. that's the dns finding i posted about yesterday. a security firm, claroc, found mo…(opens the original post in a new tab)
15. 20:53
    X@minister0x· Discussion

    Meta's new AI agent Muse leaked private conversations through its share links. Researchers at Claroc found 6,800 share…(opens the original post in a new tab)
16. 20:40
    X@WIREDScience· Discussion

    The company is suspending the feature after security researchers discovered how easy it was to access sensitive informa…(opens the original post in a new tab)
17. 20:35
    WIRED Security and AISelected

    Design flaw in Meta Muse share links exposes users' private conversations

    Meta has paused the sharing feature of its AI agent Muse after the security company Claroc found that the feature's link design made users' private conversations publicly searchable. Muse places conversation titles in subdomains of cf.metaaiusercontent.com; once a link is clicked it enters passive DNS records, and researchers said a single query enumerated 6,800 share links. After opening several hundred of them, they saw information including notes a job seeker prepared for a confidential interview at a frontier AI lab, an internal revenue review at a national marketing company, a small business owner's loan application, a bank fraud alert containing partial account numbers, a real estate investment return table, and an employee's full-year vacation schedule. Claroc co-founder and CTO Asaf Aprozper said the report was submitted on October 8 through Meta's bug bounty program. Meta said it is reviewing the report and considering changing how links can be discovered, and that users no longer face this threat during the pause.

18. 20:33
    X@Prevent_Cyber· Discussion

    Meta has suspended Muse AI chat sharing after researchers discovered 6,800+ share hostnames through passive DNS records…(opens the original post in a new tab)
19. 20:32
    X@larsnow· Discussion

    6,800 public links to private Meta Muse chats, found via passive DNS. Loans, calendars, bank alerts. Meta paused sharin…(opens the original post in a new tab)
20. 20:30
    X@DataconomyMedia· Discussion

    Meta paused Muse chat sharing after researchers found 6,800 public links exposing financial records and internal compan…(opens the original post in a new tab)
21. 20:21
    X@peldumHack· Discussion

    1/5 Compartiste un chat con la IA de Meta "solo para un colega"… y terminó listado en un directorio público. 🧵 Investi…(opens the original post in a new tab)
22. 20:17
    X@UndercodeUpdate· Discussion

    Unmasking GhostShares: How Passive DNS Telemetry Exposed Thousands of Private Meta Muse #AI Chats -Prediction: 📈 1 Pos…(opens the original post in a new tab)
23. 20:01
    X@bigchangeai· Discussion

    On October 20, Claroc said 40 older shares it rechecked no longer opened, though their titles remained in DNS history.…(opens the original post in a new tab)
24. 20:01
    X@bigchangeai· Discussion

    Claroc says it found more than 6,800 hostnames in one commercial dataset and checked only a few hundred. It reported a…(opens the original post in a new tab)
25. 20:00
    X@bigchangeai· Discussion

    Meta paused Muse conversation sharing after researchers found that public share pages could be discovered through passi…(opens the original post in a new tab)
26. 19:54
    WebAI Threat Watch (aithreat.io)· Media coverage

    Meta suspende la posibilidad de compartir las conversaciones con Muse tras detectarse que exponía información sensible(opens the original post in a new tab)
27. 19:26
    X@Paul__Walsh· Discussion

    Meta’s cuddly spy called Muse has exposed private conversations by making links to shared chats publicly searchable. Pr…(opens the original post in a new tab)
28. 19:18
    X@Zeniteqco· Discussion

    Meta Pauses Muse Sharing After 6,800 Links Surface Researchers found shared Muse pages through DNS records, exposing a…(opens the original post in a new tab)
29. 19:02
    X@luzferlux· Discussion

    Meta pausa la función de compartir chats de Muse tras hallar Claroc unos 6.800 enlaces localizables con una búsqueda de…(opens the original post in a new tab)
30. 18:50
    X@GlobalNewsEvent· Discussion

    Meta paused a feature in its AI assistant Muse that allowed users to share conversations via a link, after security fir…(opens the original post in a new tab)
31. 18:49
    X@GlobalNewsEvent· Discussion

    Meta pauses Muse sharing feature after security firm finds AI chats exposed via public DNS records https://briefly-news…(opens the original post in a new tab)
32. 18:35
    WebOSChina News· Media coverage

    Meta Muse shared conversations can be found by strangers: titles written into the URL, a single DNS query exposes everything(opens the original post in a new tab)
33. 18:32
    WebGeekNews (Korea)· Media coverage

    Meta Muse, 공유한 대화의 개인정보 노출로 공유 기능 중단(opens the original post in a new tab)
34. 18:31
    X@paddleurway· Discussion

    Hot take: the riskiest button in AI isn't "send." It's "share." Meta's Muse hit 10.2M US downloads in its first 40 day…(opens the original post in a new tab)
35. 17:48
    WebAI Threat Watch (aithreat.io)· Media coverage

    Cette faille dans Muse expose des conversations privées et des secrets financiers(opens the original post in a new tab)
36. 16:58
    X@overheadclick· Discussion

    ⚡ Meta Muse: 10M Surge to Zero Sharing ▸ Historic consumer velocity joins top 12 app launches ever ▸ Critical client D…(opens the original post in a new tab)
37. 16:57
    WebZenn Security (Japanese)· Media coverage

    Meta "Muse" shared links leave conversations discoverable by anyone(opens the original post in a new tab)
38. Time not given
    BlockBeats

    Meta Muse privacy flaw exposed: one search found more than 6,800 chat links, and corporate secrets were also turned up

    U.S. cybersecurity company Claroc found that chat share links from Meta's personal AI agent Muse could be retrieved in bulk by strangers, with more than 6,800 links found in a single query of a DNS history database. When Muse shares a chat, it generates a webpage viewable without login and writes the chat title and a random ID into the domain name; after the page is opened, the full domain name may be recorded by third-party DNS services. A spot check of several hundred found dozens of sensitive documents, including internal corporate revenue reports, small-business loan applications, and preparation materials for a candidate's confidential recruiting communications with a frontier AI lab. Claroc reported to Meta on October 8 and published its research on October 18; Meta did not confirm suspension of the chat sharing feature until October 20, after Ars Technica intervened with inquiries. The 40 links previously viewable without login had all become invalid on recheck, but chat titles remained in DNS history records. Zuckerberg last month also called Muse a product "designed from the ground up for privacy and security."

39. 02:07
    The Verge AISelected

    After researchers found AI conversations appearing online, Meta paused Muse's sharing feature

    Meta suspended Muse's conversation-sharing feature after researchers at the security company Claroc found through public DNS records that more than 6,800 Muse share links could be retrieved. Claroc said Muse constructs URLs from a share title plus a random ID, that the hostname often exposes the page content before it is opened, and that the hostname retrieved from DNS can be used to reconstruct the link. Based on this, the researchers viewed hundreds of Muse conversations, including a marketing company's revenue assessment, a small business owner's loan application, a workplace's full-year employee calendar, and a job applicant's notes from a call with an AI lab. Meta spokesperson Tracy Clayton said the feature has been suspended to review the report and consider changing how links are discovered. Previously, conversations from ChatGPT, Claude and Grok had also appeared in Google search.

1. 23:19
   Le Fil IA

   6800 conversation-sharing links with Meta Muse were made public, findable with a single DNS query

   Researchers at security company Claroc found more than 6800 conversation-sharing links for Meta AI agent Muse with just a single DNS query; these links can be accessed by anyone who knows how to look for them. They opened only a few hundred of them and had already seen loan applications, bank fraud alerts and one company's vacation schedule. The article notes that once sharing links have addresses that are easy to enumerate, they become public entry points; users may face identity impersonation, fraud and industrial espionage risks, and companies whose employees use such tools for work may also leak internal data without anyone noticing. Previously, shared ChatGPT conversations were indexed by search engines in 2025, and Meta AI's public feed had also exposed conversations users believed to be private.

2. 20:33
   Ars Technica AISelected

   Meta Muse exposed personal and business secrets when users shared conversations

   Researchers at security company Claroc said they enumerated 6,800 conversation-sharing links created by Meta Muse users, and upon opening several hundred of them found information clearly not intended to be public, including personal and business secrets. Meta told Ars Technica in response that it is reviewing the feature and has paused sharing during the review. Muse is a general-purpose AI agent launched by Meta; its sharing feature generates a unique URL that lets anyone open a page hosting the content. The usual practice is to make the URL contain a long string of hard-to-guess characters, but a core design decision in how Muse constructs URLs makes these links easy to discover. Meta CEO Zuckerberg said last month that Muse was "built from the ground up for privacy and safety."

1. 08:00
   Claroc Blog

   Claroc says Meta Muse share-page addresses contain conversation titles, and passive DNS can find more than 6800 share pages

   Claroc's research states that Meta's AI agent Muse names the web addresses of shared conversations after the conversation titles, and a single commercial passive DNS query yielded more than 6800 shared-page hostnames. Muse's share pages open with just a link, no login required; robots.txt only constrains crawlers and does not restrict access, and when a browser resolves a hostname it records the full address, including the random ID within it, into a queryable public DNS index. Claroc opened only a few hundred pages, a small number of which contained sensitive content, including a candidate's confidential interview preparation for a frontier AI lab (including that lab's internal contacts and meeting times), company revenue assessments, loan applications, and employee vacation calendars; the companies involved were confirmed as real through public information. Claroc reported the matter through Meta's bug bounty program on October 8, 2026, and stated it found no evidence that these shares were misused; its conclusions cover only one discovery channel, one product, and a relatively short time window, and do not represent the overall scale of Muse's exposure.

Current attention 44·Peak in the comparable period 70 (Oct 23 12:00)·Change over the comparable past 24 hours 0%