Office management edition
Meta pauses sharing in Muse after a leak, while more AI assistants are arriving that take over email, calendar and Excel work.
Meta pauses sharing in AI agent Muse: 6,800 chat links found publicly
Meta has paused the share feature of its new AI agent Muse. Researchers at security company Claroc found that shared chats can be found publicly. They uncovered 6,800 links that users had created to share a chat. According to them, a search query was enough to find them.
They opened a few hundred links. These contained information that should not have been public. It included notes for a confidential meeting with an AI lab, with the name of the contact person and the time. There was also an internal revenue analysis from a marketing company, meant for the director. They also found a small business owner's loan application with the amount, and a to-do list with a fraud alert from a bank and part of a bank account number. There was also an internal report from a real estate investor with addresses and exact amounts. Finally, they found a holiday calendar of a company with dozens of employees and the weeks they would be away.
Meta says users can share a page that anyone with the link can open. The company is now investigating how the links can be found and is considering changes. Claroc co-founder Asaf Aprozper reported the problem to Meta on 8 October. He also tried to reach Meta through LinkedIn, but got no answer.
Did you share a Muse chat? Then the link may already have been found, even now that sharing is paused.
Background for subscribersAn agent that carries out tasks by itself gets access to your email, calendar and other data. The Muse leak shows that a share link that nobody seems able to guess can still be found. So before you connect an agent, ask whether it has a share feature and what data could end up in it.
Claude Duet contacts you by itself
Anthropic has introduced Claude Duet, an AI assistant that contacts you by itself, even before you ask for anything. Duet connects to your apps. Every morning it sends a short overview of important matters. After that, it checks your apps every few hours and sends a notification if something is going on. It can do simple administrative tasks, but also more complicated work such as building web apps. Before it sends a message, makes a payment, signs a document or deletes a file, it asks you for approval. It cannot see passwords or login details. For now you can't use it in the Netherlands. Duet is a research preview, only for Pro and Max subscribers in the United States, and you get in through a waiting list. You use it on the web or through its own iOS app. If your work is a mix of email, calendar and payments, this is the kind of help it is meant for.
Background for subscribersThis is a taster.
Subscribers read the whole Office management edition: every story, each with its background in plain language.
Subscribe →Not ready for that? Read the free letter first →
AI and tech, made simple.
This is the Office management edition. Subscribers get the background to every story, in plain language.
Subscribe
inklaretaal · Amsterdam · © 2026