Meta Muse exposes user secrets through shared links
Ars Technica: Meta Muse exposes users' personal and business secrets when they share conversations
Muse, the new general-purpose AI agent from Meta, can expose sensitive information when users share conversations through Web links, researchers reported Monday. Like many online services, Muse allows users to share searches, conversations, images, and similar content with other people. Such share features usually involve clicking an option to create a unique URL that anyone can use to load a page hosting the content. To keep potentially sensitive information from being accessible to unintended
What happened
Meta's Muse AI assistant has a security flaw that exposes sensitive information when users share conversations through web links. Researchers discovered over 6,800 shared conversation links were publicly accessible through DNS records, revealing business financial records, personal loan applications, employee data, and other confidential information users did not intend to make public. Meta paused the sharing feature and said it would review how shareable links can be discovered before resuming it.
What each outlet adds
- Ars Technica ↗: The vulnerability exists because conversation titles are included in shareable URLs, which get recorded in public DNS databases that anyone can search.
- The Verge ↗: Researchers at security firm Claroc found the 6,800 links and noted this follows a pattern where similar sharing features from other AI assistants have also made conversations more public than intended.
Why it matters
Meta markets Muse as trustworthy enough to access most of a user's accounts, making this vulnerability particularly concerning given the company has already faced other security issues with the service. The flaw demonstrates how link design in sharing features can unintentionally expose sensitive conversations to the public.
Get smart on it
Meta's Muse AI assistant has a security flaw that allows strangers to discover shared conversations without receiving the direct link. When users create shareable links for their Muse conversations, the links include the conversation title as part of the web address, which gets recorded in public DNS databases that anyone can search. Researchers found they could discover thousands of these links with a single query and discovered sensitive information including business financial records, personal loan applications, and employee data that users never intended to make public. Meta markets Muse as trustworthy enough to access most of a user's accounts, making this vulnerability particularly concerning given that the company has already faced other security issues with the service.
Explainer: macOS Full Disk Access and the AI Agent Privacy Reckoning
Relevant courses
Want to go deeper than the news? Explore live, cohort-based AI courses taught by practitioners.
Browse AI courses on MavenRelated news
Trump administration orders ban on DeepSeek in federal agencies
The Department of Homeland Security has ordered artificial intelligence technology from the Chinese company DeepSeek Ltd. be removed from all federal civilian agencies. The order, published on the Federal Register website today, warned that DeepSeek’s AI models present “multiple threat vectors,” that could give the Chinese Communist Party “extensive authority” to access American government infrastructure. […] The post Trump administration orders ban on DeepSeek in federal agencies appeared
Also reported by TechCrunch and The Decoder
Sam Altman reportedly pitched three endgames for AI safety, one involving a single firm melting everyone else's GPUs
OpenAI CEO Sam Altman laid out three paths to safe AI in an internal presentation: an international watchdog modeled after the IAEA, a merger of the major labs into one entity, or a single company so powerful it could shut down everyone else's compute. He called the last option "terrible." The article Sam Altman reportedly pitched three endgames for AI safety, one involving a single firm melting everyone else's GPUs appeared first on The Decoder.
Army Cyber Command's ECHOTRIBBLE would turn AI agents into self-spreading cyberweapons
The Army Cyber Command is developing AI agents that move through other networks like a computer worm and "neutralize" targets, according to internal documents. The program, codenamed ECHOTRIBBLE, is designed to reach even air-gapped systems with no network connection and run with minimal human oversight. Experts warn about collateral damage, pointing out that AI agents have recently broken into outside systems without meaning to, even without any order to attack. The article Army Cyber
Anthropic pitches AI safety bill that may block a model if 50+ people could be killed
The proposed policy seems to offer protections against AI run amok but actually forbids federal agencies from blocking a model's release without the permission of a judge.
A hacker broke into John Deere and SharkNinja with an army of AI agents
A hacker broke into more than 100 websites using an army of AI agents that mostly operated on their own, according to findings from the AI security firm Norforge. Though Norforge doesn't name the targets, Reuters reports that the victims included companies like John Deere, SharkNinja, and Cummins. Concerns over AI-powered cybersecurity breaches have grown as the technology grows more advanced, with hackers using the tools to carry out large-scale attacks. At the same time, rogu
Anthropic is letting METR researchers look under the hood with employee-level access
METR will publish its own assessments of Anthropic’s risks, incidents, and practices, and the frontier AI model maker has given up the right to block them.
Also reported by The Decoder and Ars Technica