TLDR InfoSec · ATTACKS & VULNERABILITIES

META MUSE EXPOSES USERS' PERSONAL AND BUSINESS SECRETS WHEN THEY SHARE CONVERSATIONS

arstechnica.com3 min read

Summary from the TLDR InfoSec newsletter

Researchers at Claroc found 6,800 Meta Muse share links through passive DNS searches. The links included conversation titles in their subdomains, making them searchable. Samples exposed executive-search notes, revenue reviews, loan applications, bank-fraud details, property records, and staff calendars. Meta paused the sharing feature on October 20 while reviewing the report.