Meta Muse share links easy to guess, researchers enumerate 6,800 private conversations
Ars Technica AI · rss · 2026-10-20
Researchers at security firm Claroc found that Meta's new general-purpose AI agent Muse exposes sensitive user data through its conversation-sharing feature, despite Zuckerberg's claim that Muse was "built from the ground up for privacy and security." The share URLs are constructed in a way that makes them easy to discover: the team enumerated 6,800 links users created to share conversations, and after opening a few hundred found clearly private information, including personal and business secrets. A single query is all that's needed to surface them.
More from Safety
- Sanders calls to pause autonomous AI agents in bank accounts; critics push back — AIandDesign · 2026-10-23
- TechPolicy essay: system prompts are weak evidence of AI safety, outputs must be evaluated — mmitchell_ai · 2026-10-23
- Anthropic's deputy security chief warns cyber threats will get 'a lot worse before they get better' — Polymarket · 2026-10-23
- AI cyberattacks could paradoxically accelerate AI development in an offense-defense arms race — kimmonismus · 2026-10-23
- AI Now's People's AI Assembly spotlights data center opposition and labor rights — AINowInstitute · 2026-10-23
- Cloudflare CEO: Next two years of AI cyberattacks will be terrifying but make the internet more secure — johncoogan · 2026-10-23