Meta’s AI assistant Muse allows users to share conversations via public URLs, but a security flaw exposed sensitive personal and business information due to the inclusion of conversation titles in the URLs, making them easily discoverable through passive DNS searches. Researchers found thousands of such links revealing confidential data, prompting Meta to suspend the sharing feature while investigating and considering changes to prevent unintended access.
