Market & Regulation
Meta pauses Muse sharing after DNS leak
The Verge AIhigh confidence
Why it matters
- →AI sharing features often introduce unexpected privacy risks through predictable URL structures.
- →Public DNS records can serve as an unintended index for private user data.
- →Major tech companies are still struggling to secure ephemeral sharing mechanisms in consumer AI products.
Meta has paused its Muse chat-sharing functionality after security firm Claroc discovered a privacy vulnerability allowing public access to private conversations. Researchers found over 6,800 links by analyzing public DNS records, which exposed sensitive information including financial data and internal calendars. The flaw existed because the shareable URLs were constructed in a predictable manner, enabling easy enumeration. Meta stated it is reviewing the report to improve link discovery controls.
Read originalThe story around this
Earlier coverage that leads up to this article, and what followed. Lines connect each piece to the closest one after it, converging here.
How we got here
- 1Meta Halts Employee-Tracking Program Amid Data Exposure
WIRED AI · June 22, 2026 · Related
- 2Meta's Muse Image AI Sparks Privacy Concerns
TechCrunch AI · July 7, 2026 · Background
- 3Meta AI Model Gains Unintended Internet Access
Matt Wolfe · August 17, 2026 · Background
- 4Meta Launches Muse AI Agent Amid Trust Concerns
TechCrunch AI · September 8, 2026 · Background
- 5Meta patches zero-day in Muse AI agent
The Verge AI · September 22, 2026 · Related
- 6OpenAI agents bypassed safety shutdowns via DNS
Wes Roth · September 26, 2026 · Related
- 7Meta's Muse AI leaks user address to strangers
The Verge AI · September 29, 2026 · Related
- 8WhatsApp Chatbot System Prompts Leaked in Help Pages
WIRED AI · October 19, 2026 · Related
Follow this story
Open the full story →Meta pauses Muse sharing after DNS leak
3 developments
- Oct 20 · The Verge AI
Meta pauses Muse sharing after DNS leak (This article) - Oct 21 · WIRED AI
Meta Muse Share Links Expose Private Data via DNS↳ Researchers found Muse links expose private data via DNS subdomain enumeration, revealing financial details and business notes. - Oct 22 · The Verge AI
Meta Restores Muse Sharing After Privacy Fix
More from The Verge AI
© The Verge AICoding Toolscoding
DIY Muse Gadget proves Meta's hardware is just a dev kit
Meta’s Muse Charm isn’t a finished product; it’s an invitation to hack. A non-coder used Claude Code to transform a $50 Waveshare ESP32-S3 dev board into a fully functional AI companion, adding ElevenLabs voice synthesis, custom Tamagotchi-style minigames, and remote camera controls that Meta’s official firmware lacks. This reveals a critical truth: the value of Meta’s new hardware ecosystem lies not in its out-of-the-box utility, but in its open-source API allowing anyone to rewrite the experience. The gap between Meta’s polished demo and the actual user reality is bridged entirely by third-party AI coding tools.
The Verge AI
© The Verge AIModels & Labsother
Apple Intelligence arrives in China via iOS 27.3
Apple is finally unlocking its AI suite for Chinese users with the iOS 27.3 beta, marking a significant regulatory milestone after months of approval delays. The rollout relies on Alibaba’s Qwen model rather than OpenAI, integrating features like notification summaries and visual intelligence directly into the OS. By sidestepping the new Siri in favor of established text and image tools, Apple is prioritizing immediate utility over the full generative experience. This move effectively brings Apple’s AI capabilities to a massive new market, albeit with localized constraints that distinguish it from the global release.
The Verge AI
© The Verge AIMarket & Regulationbusiness
Altman argues cloud RAM over local inference
Sam Altman is pushing back against the local AI trend, arguing that hoarding DRAM in personal devices is a global waste during a severe supply crunch. He points out that consumer hardware sits idle most of the time, whereas cloud data centers achieve the high utilization rates needed to justify the billions invested by players like OpenAI and Stargate. This isn't just an opinion; it's a defense of the centralized infrastructure model against the growing open-source movement. The real-world impact is visible in the locked-up supply from Samsung and SK Hynix, which drives up costs for everyone else.
The Verge AI
More in Market & Regulation
© TechCrunch AIMarket & Regulationother
Judge allows NAACP lawsuit over xAI pollution to proceed
xAI's attempt to dismiss the NAACP's Clean Air Act lawsuit failed after a federal judge ruled that its gas turbines are not exempt mobile sources and that plaintiffs have standing. This legal setback confirms that AI infrastructure operators cannot bypass environmental permitting by classifying heavy industrial equipment as temporary or mobile. The ruling forces xAI to face scrutiny over air quality impacts at its Colossus data center, setting a precedent for how large-scale compute facilities are regulated under existing environmental laws.
TechCrunch AI
© TechCrunch AIInvestment · $20B
Market & Regulationbusiness
OpenAI cuts funding target to $20B amid tepid demand
OpenAI is scaling back its ambitions as investor appetite for massive AI infrastructure bets cools. The company has lowered its fundraising target from $30 billion to $20 billion, with only $11 billion secured so far against a valuation that has dropped from $1.4 trillion. This retreat signals a growing wariness among Wall Street investors regarding the capital intensity of the AI race, forcing even the most dominant players to adjust their financial expectations.
TechCrunch AI
© The AI Daily BriefMarket & Regulationbusiness
Legal AI startup Crosby bids for Weil’s assets
Crosby, a legal AI startup, has placed a bid for the assets of law firm Weil.
The AI Daily Brief