Meta Platforms said on Tuesday that Meta suspended Muse AI's conversation-sharing feature after security researchers found that public domain name system (DNS) records could expose thousands of shared chat links. Claroc said researchers identified approximately 6,800 shared Muse chat links and accessed conversations containing sensitive information. The material included meeting details involving a leading AI lab, a small-business loan application, a bank fraud alert with partial account information, a company's vacation calendar and internal business documents.
Claroc researchers found over the weekend that Muse generated sharing URLs in a predictable format, incorporating conversation titles into web addresses under a common domain structure. Claroc said this format made the links discoverable through passive DNS searches. Passive DNS searches use archived records of DNS activity to identify internet addresses. Claroc said Muse wrote conversation titles into public DNS and a single search could return thousands of links listed by name. Ars Technica first reported Claroc's findings.
A Meta spokesperson said on Tuesday that Meta launched the Muse bug bounty program to help researchers identify potential issues and improve the product. The spokesperson said shared Muse content generates a webpage accessible to anyone with the link. The spokesperson said Meta paused sharing while reviewing the findings and considering changes to how the links can be discovered. Claroc subsequently said researchers could no longer open a sample of previously accessible links following Meta's update. Claroc welcomed the speed of the closure.
In September, Inc. technology columnist Jason Aten alleged that Muse accessed private messages on Aten's Mac despite Aten never enabling the Full Disk Access permission. Meta spokesperson Andy Stone rejected the allegation at the time. Stone said Muse can access Apple's Messages app only when users explicitly opt in.
Meta will report third-quarter results after the market closes on Wednesday. Analysts expect revenue of $63.36 billion, up from $51.24 billion a year earlier. Meta has beaten revenue estimates for more than 10 consecutive quarters. Tech analyst Dan Ives expects Meta to monetize Meta's 3.5 billion-user base through the Muse AI agent. Ives said the agent could make AI more accessible through Facebook and Instagram. Market strategist Shay Boloor said Truist projects approximately $29 billion in Muse revenue by 2030, including an estimated $11 billion from subscriptions.
Meta shares closed on Tuesday at $694.25, down 1.59%. Benzinga Pro data showed Meta shares rose 0.11% to $695 in after-hours trading. Benzinga Edge Stock Rankings showed strong short-, medium- and long-term price trends for META, alongside a moderate value score.
Meta Pauses Muse AI Chat Sharing After 6,800 Exposed Links
BenzingaShare
Summary
Meta paused Muse AI’s chat-sharing feature after 6,800 links were exposed through public DNS records, according to AI + crypto news. Claroc researchers found that Muse AI generated predictable URLs, allowing unauthorized access. Meta is reviewing the security breach and adjusting the system. The company also launched a bug bounty program to strengthen security.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.