Meta pauses Muse sharing after chat links became searchable

Meta has paused a feature in its Muse AI agent after security researchers found that more than 6,800 user-created shared conversation pages could be located with a simple search. The chats were not exposed because someone guessed their links: Muse put each conversation’s title, alongside a random identifier, into the web address. When recipients opened those links, the addresses could be recorded in searchable DNS databases—the internet’s directory of domain lookups—giving outsiders a way to find pages they had never been sent. Researchers said samples included business reviews, loan paperwork, bank-fraud alerts, and staff schedules. The episode is a reminder that a link intended for “anyone who has it” is only private if the link itself cannot be easily discovered.