Meta Patches Instagram AI Vulnerability That Let Attackers Hijack Accounts Through Chat

Meta fixed a critical flaw in its AI-powered Instagram account recovery assistant after attackers exploited it to seize high-profile accounts. The attack was straightforward: using a VPN to match the target's location, initiating a password reset, then convincing the AI chatbot to change the account's email address. The vulnerability, shared on Telegram in March, exposed how conversational AI in security workflows lacks safeguards traditional authentication systems provide.