Meta pauses Muse sharing after DNS flaw exposes private chats
Meta just suspended the conversation-sharing feature in its new Muse AI agent after security researchers discovered a flaw that leaked sensitive user chats. Claroc found that Muse embedded chat titles into subdomains, letting anyone harvest 6,800 shared links with a simple passive DNS search—exposing executive notes, revenue figures, and loan applications. Why it matters: It is an embarrassing privacy faceplant for a tool Mark Zuckerberg recently claimed was built from the ground up for security.