A security flaw in Meta's AI-powered support chatbot allowed hackers to hijack Instagram accounts without needing access to the victim's legitimate email. Attackers used a VPN to spoof location, then tricked the Meta AI Support Assistant into adding a new email address and issuing a password reset code to that attacker-controlled address. Notable victims included the Obama-era White House Instagram account and a U.S. Space Force official. Instagram confirmed the issue was resolved on Monday, though the total number of affected accounts remains unknown.
2 Impressions