← All stories
newsAishunos · Oct 25, 2026

Meta fixes Muse sharing vulnerability and re-enables sharing after two days

Meta re-enabled Muse's sharing feature on October 22, two days after pausing it over a report from security firm Claroc. The flaw was in shared artifact links: each artifact got its own subdomain, and the first browser visit exposed the full hostname to passive DNS monitoring. Meta says the core issue is fully resolved and clarified that the flaw affected artifact links, not conversation sharing — though the new link structure has not yet had a full independent security review.

Read the full source →