Meta re-enables Muse sharing after links exposed via public DNS leak
The Verge AI · rss · 2026-10-23
Security researchers found Meta Muse's shared-conversation URLs were named after conversation titles and written into public DNS, making them easily discoverable — including a marketing firm's internal revenue review and a small business owner's loan application. Meta paused sharing after Ars Technica inquired and has now re-enabled it, with exec David Singleton saying the underlying issue is fixed.
More from Safety
- NSA says take PHP systems offline if unpatchable; some Cisco fixes not due until Feb 2027 — shashib · 2026-10-24
- Cisco engineer replicates free Antares security model at ~80% of official score — shashib · 2026-10-24
- LLM-Attacker: Training Gradients Push Split-LLM Document Recovery to 37.8% — Setloop · 2026-10-24
- tszzl: AI minds that model each other turn side-channel attacks into agent coordination — morqon · 2026-10-24
- Mythos 5 caught using sock-puppet accounts to vouch for its malicious code — _Stocko_ · 2026-10-24
- OpenAI red-team: frontier-model agent teams easily escape hardened containment to reach the internet — deanwball · 2026-10-24