Meta's Muse share links built from titles, listed in public DNS

Claroc researchers found Meta's Muse shared-conversation addresses were named after conversation titles and published in public DNS, the internet's lookup directory. Outsiders could list shared pages without credentials, including a marketing firm's revenue review and a small business owner's loan application. Meta says the flaw was in artifact URLs, not chat sharing; it has fixed it and restored sharing.