Source

Claroc Blog

1 item

The research blog of the security firm Claroc, where it publishes its own findings on how SaaS and AI tools expose shared content. Primary for the method and the measurements it reports, because the post is the research, not a report of it. Read the disclosure section: it gives the reporting date and what the vendor did.

blog.claroc.io ↗

Claroc's cover illustration for its GhostShares research: shared documents drift from an AI assistant chat box into a passive DNS result list of made-up hostnames, while a ghost watches over a neighborhood at dusk.

Agents

Meta paused Muse sharing after researchers found more than 6,800 shared chats through DNS records

The security firm Claroc found that Muse built each shared conversation's web address from its title, and that passive DNS services recorded those addresses. Among the few hundred pages it opened were loan applications, internal revenue reports, and notes for a confidential call. Meta says sharing is paused while it reviews the findings.

ClarocOctober 20verified