Hackers Exploit Meta AI Support Bot to Hijack High-Value Instagram Accounts

Security researchers discovered that cybercriminals manipulated Meta's AI‑powered support chatbot to reset the passwords of high‑profile Instagram accounts, siphoning handles worth over $1 million on the gray market. The attack, described as a classic "confused deputy" exploit, succeeded on accounts lacking multifactor authentication but failed where SMS‑based MFA was enabled. The breach underscores the risks of granting AI agents elevated privileges without robust verification safeguards, just months after Meta launched the assistant in March 2026. Leggi di più