Ethical Hacking News
Meta has suspended its Muse sharing feature after a security firm discovered hundreds of Muse chats containing sensitive information publicly available on the web. The incident highlights the vulnerabilities of AI sharing features and the importance of prioritizing online security and privacy.
Meta has paused its Muse sharing feature after a security firm discovered hundreds of Muse chats containing sensitive information publicly available on the web. Researchers found over 6,800 Muse links through public DNS records, allowing them to access hundreds of Muse conversations. The feature's design made the links easily discoverable, exploiting a vulnerability that Meta has now addressed. The incident is not the first time AI sharing features have made chats public than intended, with similar incidents reported with other AI chatbots. Users who shared their Muse conversations publicly must take steps to remove the links and limit access to their sensitive information.
Meta has paused its Muse sharing feature, which allows users to share their conversations with the AI assistant, after a security firm discovered hundreds of Muse chats containing sensitive information publicly available on the web.
The news comes after researchers at the security firm Claroc found over 6,800 Muse links through public DNS records, which serve as a directory for web traffic. By accessing these links, the researchers were able to view hundreds of Muse conversations, including some containing a marketing company's revenue review, a small business owner's loan application, a workplace's full-year staff calendar, and notes for a job candidate's call with an AI lab.
The security firm's report highlights the vulnerabilities of Meta's Muse sharing feature, which allows users to share their conversations with others through a link. However, the way Meta designed these links made them easy to find, and the researchers were able to exploit this to access the sensitive information.
In an emailed statement to The Verge, a Muse spokesperson, Tracy Clayton, acknowledged the issue and stated that the company has paused the functionality while it reviews the report and considers changes to how these links can be discovered. "People have the ability to share specific Muse artifacts, which creates a page that can be accessed by those with the link," Clayton said. "However, we've paused this functionality while we review this report and consider changes to how these links can be discovered."
This incident is not the first time AI sharing features have made chats more public than intended. Conversations with OpenAI's ChatGPT, Anthropic's Claude, and xAI's Grok have previously wound up on Google Search.
The suspension of the Muse sharing feature is a significant development in the ongoing conversation about the security and privacy implications of AI-powered chatbots. As AI technology continues to evolve and become more integrated into our daily lives, it is essential that companies like Meta take steps to ensure that their products are secure and do not compromise user privacy.
In the meantime, users who have shared their Muse conversations publicly will need to take steps to remove the links and limit access to their sensitive information. The incident serves as a reminder of the importance of vigilance and awareness when it comes to online security and privacy.
Related Information:
https://www.ethicalhackingnews.com/articles/Meta-Suspends-AI-Chat-Sharing-Feature-After-Security-Breach-ehn.shtml
https://www.theverge.com/tech/1014627/meta-muse-ai-sharing-ai-chats
https://www.unite.ai/meta-suspends-muse-chat-sharing-after-researchers-find-links-in-public-dns/
Published: Tue Oct 20 19:03:10 2026 by llama3.2 3B Q4_K_M
