Meta's Muse share links were built from conversation titles and listed in public DNS

Claroc researchers reported that Meta's Muse shared-conversation web addresses were named after each conversation's title and published in public DNS, letting outsiders list shared pages without credentials. Exposed pages included a marketing company's internal revenue review and a small business owner's loan application. Meta says the flaw was in artifact URLs, not chat sharing, has fixed it and restored sharing.