Tech Meridian ← ENTITY INDEX
PROMY MERIDIAN RU

COMPANY · ENTITY #20668

Claroc

Related event timeline, sources and context from the news index.

EVENT TIMELINE

3

COMPANIES · 1 SOURCE · The Verge AI

Meta restores Muse sharing after fixing URL issue and issues new links

Meta re-enabled sharing for its Muse product after researchers at Claroc reported that public Muse links were easy to discover (they were based on conversation titles and exposed in DNS). Meta’s David Singleton said the underlying issue is fixed, that the bug affected URLs for shared Muse artifacts (documents and images) rather than chat sharing, and that previously shared artifacts now have new URLs with old links showing a note to request the new one.

6.0

COMPANIES · 2 SOURCES · Ars Technica · WIRED AI

Researchers say Meta's Muse share links expose users' sensitive conversation content

Security firm Claroc reported that Muse share links use the domain cf.metaaiusercontent.com and include the conversation title in the subdomain, allowing researchers to enumerate about 6,800 shared links via passive DNS and access dozens of conversations containing sensitive personal and business information. Claroc called the phenomenon "GhostShares," said the behavior appears to be by design, and reported contacting Meta without a reply; the disclosure follows other Muse security concerns including a recent macOS zero-day reported by researcher Patrick Wardle.

8.0

COMPANIES · 1 SOURCE · The Verge AI

Meta pauses Muse conversation-sharing after Claroc finds links exposed via DNS

Meta said it paused Muse’s feature for sharing conversations after security firm Claroc reported finding more than 6,800 Muse share links exposed via public DNS records. Claroc said some discovered pages contained sensitive material (marketing revenue, a loan application, a staff calendar); Meta is reviewing the feature while considering how links can be discovered.

7.0