[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffD26wud99NH2DVFFlDDaZx6Wgs8kIzvgo92TRlkm1I4":3},{"article":4,"iocs":44,"watch_terms":45,"solutions":46,"lesson":132},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"8fd437d6-1dd0-4c3b-a0a6-b96985ec9839","Muse Creates Detailed Profiles of All Your Friends and Family","muse-creates-detailed-profiles-of-all-your-friends-and-family-a19d76","Millions have downloaded Meta’s AI agent Muse. But getting it to do your bidding comes with privacy costs.","Meta's AI agent Muse, downloaded by millions, has been found to create detailed profiles of users' friends and family. Researchers extracted internal files revealing that Muse compiles data on relationships, including facts, history, and suggestions for strengthening connections. This functionality raises privacy concerns due to the depth of personal information being collected and analyzed by the AI.","Meta's AI agent Muse creates detailed profiles of users' friends and family.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fmuse-creates-detailed-profiles-of-all-your-friends-and-family\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6abda258fa5a1bd6e2b21507\u002Fmaster\u002Fpass\u002FKernel-Panic-Muse-AI-Self-PWN-Security.jpg","2026-10-03T12:00:00+00:00","2026-10-03T14:00:13.95271+00:00",7,[17,20,23],{"name":18,"type":19},"Muse","product",{"name":21,"type":22},"Meta","vendor",{"name":24,"type":25},"AI","technology","614132b8-5837-4952-b8b5-c6c9a32a1d85",{"id":26,"icon":28,"name":29,"slug":30},null,"Privacy","privacy",[32,34,39],{"category":33},{"id":26,"icon":28,"name":29,"slug":30},{"category":35},{"id":36,"icon":28,"name":37,"slug":38},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18],{"controls":47,"vendors":131},[48,77,105],{"slug":49,"name":50,"problem":51,"products":52},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[53,61,69],{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"slug":38,"name":78,"problem":79,"products":80},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[81,89,97],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"slug":106,"name":107,"problem":108,"products":109},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[110,116,123],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":111,"product_name":112,"url":114,"description":115},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":117,"product_name":120,"url":121,"description":122},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",[],{"slug":133,"title":134,"body":135,"framework_refs":136,"framework_notes":147},"metas-muse-ai-secretly-profiles-your-social-circles","Meta's Muse AI Secretly Profiles Your Social Circles","Meta's Muse AI application was found to silently compile detailed profiles of users' friends and family members — people who never consented to having their data collected or analyzed. Researchers discovered this by extracting internal application files, revealing that the AI aggregates relationship facts, personal history, and behavioral suggestions without transparent disclosure to end users. This matters because third parties (friends and family) have no knowledge their information is being harvested, removing any possibility of informed consent. The depth of relational data collected creates serious risks including potential misuse, data breaches, and manipulation, and likely conflicts with privacy regulations such as GDPR and CCPA.",[137,138,139,140,141,142,143,144,145,146],"GDPR Article 5 – Principles of Data Processing (Lawfulness, Fairness, Transparency)","GDPR Article 6 – Lawful Basis for Processing","GDPR Article 9 – Processing of Special Categories of Personal Data","CCPA Section 1798.100 – Right to Know About Personal Information Collected","NIST Privacy Framework PR.DS-P1 – Data at Rest Privacy Protection","NIST SP 800-53 PT-2 – Authority to Process Personally Identifiable Information","CIS Control 3 – Data Protection","CIS Control 4 – Secure Configuration of Enterprise Assets and Software","ISO\u002FIEC 29101 – Privacy Architecture Framework","ITIL Service Design – Information Security Management (Third-Party Risk)",{}]