More than 10 million users in the United States and Canada set up Meta Muse personal AI assistant accounts within six weeks of its September 2026 launch.

Overview Debates Related claims Topics Sources

Roughly 25% of registered Meta Muse personal AI agent users in the U.S. and Canada engage with the assistant on any given day, with shopping being the primary use case.

According to Coveo's 2026 Commerce Relevance Report, 16% of shoppers feel comfortable allowing an AI assistant to find and buy products on their behalf.

Walmart U.S. CEO David Guggina stated in September 2026 that usage of Walmart's internal AI shopping assistant, Sparky, grew 60% quarter-over-quarter.

Walmart introduced its Sparky assistant in June 2025 and launched a four-super-agent framework that same year to integrate AI deeper into its shopping experience.

Amazon's Bee devices continuously capture surrounding conversations with an LED indicator to automatically generate notes and reminders integrated into Alexa+.

Exposed Muse links accessed by Claroc contained a national marketing firm's internal revenue review marked for its CEO and a small-business loan application with requested amounts.

Exposed Muse share URLs revealed a workplace full-year staff vacation calendar, a real-estate performance report with property addresses, and a to-do list with bank fraud alert details.

Claroc's review of exposed Muse share links uncovered a job candidate's executive-search notes for a frontier AI lab, including internal contact names and meeting times.

In 2025, Google indexed over 370,000 shared Grok AI conversations before accessibility options were adjusted.

Meta suspended the conversation link-sharing feature in its Muse AI assistant after security researchers discovered shared chat URLs exposed in public DNS records.

Muse generates web addresses for shared chats using the conversation's title and a random ID under the hostnames tier cf.metaaiusercontent.com.

Claroc CTO Asaf Aprozper submitted the Muse vulnerability report to Meta's bug bounty program on October 8, 2026, after conducting content checks on October 7 and 8, 2026.

When a user opens a shared Muse link, DNS resolvers observe and log the full hostname including the title and random ID into public, searchable passive DNS records.

Meta spokesperson Tracy Clayton stated that Meta paused Muse sharing functionality while reviewing Claroc's report and considering changes to how shared links can be discovered.

Following Meta's suspension, security firm Claroc rechecked 40 exposed Muse share links on October 20, 2026, and confirmed that none opened and the hostnames returned an error.

Claroc reported that its outreach to Meta staff via LinkedIn and the bug bounty portal initially received no direct reply prior to Ars Technica's press inquiry.

Shared AI conversations from OpenAI's ChatGPT, Anthropic's Claude, and xAI's Grok previously surfaced on public search engines like Google after similar chat-sharing features were implemented.

Public URL-scanning service urlscan.io held over 75 saved scans of exposed Muse share pages prior to Meta's intervention.

Claroc published its GhostShares research detailing the Muse DNS discovery vulnerability on October 18, 2026, while withholding all specific hostnames, links, and user identifiers.

Security firm Claroc identified more than 6,800 exposed Muse share links by conducting a single passive DNS query against a commercial database for domain cf.metaaiusercontent.com.