Meta Restores Muse Sharing Feature Following Security Vulnerability Fix
Meta has reactivated the sharing feature for its Muse platform after temporarily disabling it to address a security flaw. The vulnerability had inadvertently exposed private conversation links through public DNS records.
Meta has officially re-enabled the sharing functionality for its Muse platform following a brief suspension. The company took the feature offline earlier this week after security researchers at Claroc discovered that shared conversation links were being indexed in public DNS records. Because these URLs were generated based on the titles of the conversations, they were easily discoverable by third parties.
The security lapse resulted in the exposure of sensitive user data, including internal revenue reviews for marketing firms and private loan applications for small business owners. The issue was brought to Meta’s attention after Ars Technica contacted the company regarding the findings. Following the inquiry, Meta paused the sharing feature to implement a fix. While Meta has now restored the ability to share conversations, the incident highlights the risks associated with how web addresses are generated and indexed for public access. Meta confirmed the restoration of the feature via a post on X, though specific technical details regarding the permanent fix remain limited.
📡 Media Analysis
How each outlet framed the story — angles, word choices, and what they chose to push or ignore.
Focused on the timeline of the security failure and Meta's subsequent response.
"easy to find"
✓ Only outlet to report: Mentioned the specific types of sensitive documents, such as loan applications and revenue reviews, that were exposed.
🔍 What Nobody's Reporting
- ·Lack of comment from Meta regarding the specific technical changes made to prevent future DNS indexing.
- ·No information on whether Meta notified affected users whose private documents were exposed.
📰 Sources
0 A-rated source(s) among 1 total. Lowest trust: The Verge (B)