Claroc
A company focused on cybersecurity research that discovers security exposure of internet services through technical means such as DNS records and public indexes.
Timeline (last 90 days)
The leaked cases researchers demonstrated included a marketing company's internal revenue assessment report and a small business owner's loan application materials.
Security research firm Claroc disclosed that Muse's public conversation links carry the risk of being easily searchable, and researchers demonstrated finding pages containing sensitive information through simple searches.
Claroc's discovery method (via search engine indexing and pattern-based URL guessing) is not complicated, meaning public share links on other platforms may be equally fragile.
Claroc's research method (discovering accidental exposure of AI services through DNS records and public indexes) is low-cost and highly efficient, and may be adopted by more security teams.
Researchers at security firm Claroc found that more than 6,800 conversation links generated through Muse's conversation sharing feature could be accessed by anyone on the public internet.
Claroc researchers discovered these Muse conversation links through public DNS records.
Meta's personal AI agent Muse was hit with multiple privacy and security issues less than one month after launch.
All Facts (6)
Security research firm Claroc disclosed that Muse's public conversation links carry the risk of being easily searchable, and researchers demonstrated finding pages containing sensitive information through simple searches.
50%UnverifiedClaroc's discovery method (via search engine indexing and pattern-based URL guessing) is not complicated, meaning public share links on other platforms may be equally fragile.
50%UnverifiedThe leaked cases researchers demonstrated included a marketing company's internal revenue assessment report and a small business owner's loan application materials.
50%UnverifiedResearchers at security firm Claroc found that more than 6,800 conversation links generated through Muse's conversation sharing feature could be accessed by anyone on the public internet.
50%UnverifiedClaroc researchers discovered these Muse conversation links through public DNS records.
50%UnverifiedClaroc's research method (discovering accidental exposure of AI services through DNS records and public indexes) is low-cost and highly efficient, and may be adopted by more security teams.
50%