El bot de soporte de inteligencia artificial de Meta ayuda a los hackers a apoderarse de cuentas de Instagram de alto perfil

Key Points

• Hackers used Meta's AI support chatbot to reset passwords on high‑profile Instagram accounts.
• The bot sent one‑time reset codes to email addresses supplied by the attackers.
• No human verification was required, allowing immediate password changes.
• Victims included Barack Obama's official Instagram account, Sephora, and a U.S. Space Force sergeant.
• Accounts with multifactor authentication were not compromised.
• Meta patched the vulnerability and is securing affected accounts.
• Security researchers recommend enabling MFA and using passkeys for better protection.
• The breach underscores the need for human oversight in AI‑driven support systems.