Noesion Radarnoesion.ai
Incident2026-10-20

Meta suspended Muse’s chat-sharing feature. Researchers found shared conversations were exposed via public DNS records. They accessed 6,800 links containing private details. Exposed data included business documents and personal information. The issue stemmed from predictable subdomains based on conversation titles. Meta paused the feature to review the vulnerability. Claroc researchers confirmed links became inaccessible after the update. Meta has not announced a fix timeline.

What changed

Shared Muse conversations were accessible via predictable URLs.

What it unlocks

Preventing unauthorized access to shared conversations via passive DNS searches.

  • 6,800 shared conversations exposed

Sources

Send this to someone who needs it

Shares the story and its sources. Nothing about you.

What does this mean for your job?

This is the story as everyone gets it. Once a week we send you the version written for your role — what changed, why it matters for the work you actually do, and one thing to try. Free while we tune it.