Meta pauses Muse chat sharing after shared chats turned up in search

What happened: A security firm (named on air as Clairock) found 6,800 shared chat links from Meta's Muse personal agent that strangers could find with one search. Researchers opened a few hundred and found items including loan applications and a bank fraud alert. Meta paused the sharing feature after Ars Technica asked about it. The firm says it flagged the issue to Meta on October 8 and never heard back.
The claim: Zuckerberg said Muse was built from the ground up for privacy and security, and Meta said it waited months before launch to make sure it was safe.
Austin's take: Austin credits outside researchers and the press for catching it, but says it's sad Meta didn't catch it first after selling the product on privacy. He says personal agents only work if they're secure and hopes Grok bot, Instinct, and OpenAI's Dot are hardening their systems.
Why it matters: Personal agents are designed to pull in your email, calendar, banking, and business data. A sharing bug there can expose far more than a chatbot conversation.
What to do: Assume any shared AI chat link could become public. Review and delete old shared links, and avoid sharing chats containing financial or business details.
Not confirmed yet: Austin notes it's not yet known whether the exposure caused real damage.

The Loop