The company says a configuration error by an outside testing partner gave one of its Muse Spark models internet access during a cybersecurity evaluation.