Meta pauses Muse sharing after researchers find exposed business and personal data

Meta suspended Muse's sharing feature after security researchers found that links to users' conversations could be discovered through searchable DNS records, Ars Technica reported. Claroc researchers said they enumerated 6,800 sharing links and opened a few hundred, finding confidential business documents, a loan application and employee vacation schedules. The exposure stems from how Muse constructs sharing URLs. When an intended recipient opens a link, monitoring systems can record its DNS information in databases available through commercial services, allowing others to discover it. Meta said it paused sharing while reviewing the findings and considering changes to link discovery. The researchers examined only a few hundred of the 6,800 links they identified.