Hackers hijack Instagram accounts via Meta's AI support bot

Simon Willison's Weblog

Attackers simply asked Meta's AI chatbot to change the recovery email on high-profile Instagram accounts, and it complied. The bot logged the action as a legitimate transaction, so security operations centers saw no alerts.

meta

See 6 more sources

Meta's AI support agent bound recovery emails for anyone who asked. Your SOC never saw an alert.5 days agolouiswcolumbus@gmail.com (Louis Columbus)

Meta’s own AI was exploited to hijack Instagram accounts9 days agoEmma Roth

The Meta hack shows there’s more to AI security than Mythos5 days agoGrace Huckins

Meta AI Hands Over High-Profile Instagram Accounts to Hackers8 days agoIonut Arghire

Another 1-click admin account takeover in pewdiepie's AI tool (language in video nsfw)4 days agotheonejvoDiscuss

Deepfakes Tore a High School Apart19 days agoBrajeshwarDiscuss

Simon Willison's Weblog

7 days ago