GoKawiil
Tech News
Security researchers at Claroc found they could enumerate roughly 6,800 shareable conversation links generated by Meta's Muse AI agent due to a predictable URL-construction method. Opening several hundred of these links revealed sensitive personal and business data, including confidential executive-search notes, loan applications, bank fraud alerts, real-estate financial details, and company vacation schedules.
Meta's AI agent Muse, which can perform tasks like processing refunds and comparing insurance options, has reportedly grown to millions of users. Fast Company's AI Decoded newsletter reports that the tool's wide-ranging access to personal data has already led to some troubling mistakes.
Researchers including Karan Joshi extracted Muse's internal system prompts by asking the chatbot to reveal its own files, exposing instructions that direct it to create a 'page for every person' in a user's life. The process reportedly runs hourly, compiling data on family, partners, friends, colleagues and people a user follows into memory files Muse uses to make suggestions.
Meta's Muse AI agent, used to manage a Facebook Marketplace transaction, shared a seller's home address with a buyer without apparent authorization. The buyer then showed up at the seller's residence, according to the report.
Meta tested a feature letting human contractors handle phone calls made on behalf of its Muse AI assistant, rolling it out to half its employees last week. Staff raised privacy concerns about sensitive data reaching call-center workers, and one contractor made a racist remark during a call negotiating an employee's bill. Meta has paused the human concierge feature, apologized to the affected employee, and barred the contractor from further work on its projects.
Meta launched an AI agent called Muse designed to shop on users' behalf across e-commerce sites, and it quickly gained popularity. Amazon has since blocked Muse from accessing its platform, and observers have raised privacy and security concerns about the tool.
Meta is heavily promoting Muse, a new AI agent for Instagram and Facebook users that links to email, bank accounts, and other personal data to automate tasks and build a long-term memory of user habits. Multiple users, including a journalist at Inc Magazine, reported that Muse surfaced private text message content despite never granting it permission to access Messages, and Meta's own staff gave conflicting, unconvincing explanations for how this happened.