Skip to content
No. 202644

Finance edition

in·klare·taal
Edition 202644 · Tuesday 27 October 2026 · Clarity since 2026

This week is about who can get to your numbers: through a share link, an agent, a consulting firm or a fake colleague.

What this means for you

Shared chats with Meta Muse turned out to be findable with a search query

Muse is a new AI assistant from Meta. Users could share a chat through a link. Researchers at the security company Claroc found 6,800 such links with a search query. After opening a few hundred links, they came across information that should not have been public. It included a loan application from a small business owner and an internal revenue report for a CEO. There was also a report of bank fraud that included part of an account number, and a report from a real estate investor with addresses and exact return figures. Claroc reported this to Meta on 8 October, but says it got no reply. Meta says the sharing of chats has now been stopped. The company is looking at the report and considering changes to how the links can be found.

Source →

Background for subscribers
What this means for you
Use a list to see where your numbers go

Make a list of the AI tools and services that receive your financial data. For each line, note who else can get to it: through a share link, through an agent with access to your systems, or through a consulting firm that uses AI. Where you cannot answer that question, an agreement is still missing.

A stack of information: data

PHP flaw takes many Dutch websites down

Many websites went offline as a precaution, including RTL Nieuws, DigiD, MijnOverheid and the website of the Tweede Kamer. The cause is a flaw in PHP, a programming language that many websites run on. There are two bugs, and both score 9.2 out of 10. Anyone who exploits them can break into a site and, for example, steal customer data. A fix only came around 4 pm, and the flaw already seemed to have been exploited for hours. No concrete examples of abuse are known yet, but it cannot be ruled out. The patch, the repair, is online. Sites still have to install it. Smaller companies and hobby sites often update late and stay extra vulnerable. The ethical hackers who found the flaw used AI. For your work, you will mostly notice this through DigiD: things that depend on it, such as tax matters, could stand still for a while.

Source (in Dutch) →

Background for subscribers

This is a taster.

Subscribers read the whole Finance edition: every story, each with its background in plain language.

Subscribe →

Not ready for that? Read the free letter first →

inklaretaal

AI and tech, made simple.

This is the Finance edition. Subscribers get the background to every story, in plain language.
Subscribe
inklaretaal · Amsterdam · © 2026