Meta pauses Muse chat sharing after researchers find links

Muse sharing paused: Meta has paused a feature in its Muse AI agent that turns a conversation into a shareable web link. The move came after security firm Claroc said it found more than 6,800 shared chats through passive DNS records. Ars Technica first reported the findings Tuesday.

Muse built each link’s web address from the conversation’s title, Claroc says. Those addresses showed up in public DNS data. One search returned them by name, the firm says. Pages opened without a login. Claroc says it opened a few hundred. Most were harmless. Some held a small-business loan application, a company’s revenue review and a bank-fraud alert with a partial account number.

“We’ve paused this functionality while we review this report and consider changes to how these links can be discovered,” Meta spokesperson Tracy Clayton said in a statement to The Verge.

The pause lands as Muse grows fast. The app had 10.9 million downloads in its first 40 days, 10.2 million of them in the U.S., according to Sensor Tower data reported by TechCrunch. Daily active users hit 2.5 million on Oct. 16, Sensor Tower says.

What’s next: Claroc says 40 shares it rechecked Tuesday no longer opened. The addresses, titles included, remain in passive DNS history, the firm says. Meta says it is reviewing changes to how the links can be discovered.

Sources: Claroc; Meta via The Verge; Ars Technica; TechCrunch