Hackers weaponize Meta's AI chat to hijack celebrity Instagram accounts

TL;DR
Hackers used a prompt-injection flaw in Meta's AI support chatbot to trigger email-address changes via password resets, enabling takeover and resale of high-value Instagram accounts before Meta pushed an emergency patch on May 29; the incident highlights security risks of AI agents with broad account-modification permissions, though accounts with MFA were more resistant.
Topics:businesstechnology#account-takeover#cybersecurity#instagram#meta-ai#password-reset#technology
- Hackers duped Meta AI support chatbot to steal celebrity Instagram accounts Ars Technica
- Hackers Simply Asked Meta AI to Give Them Access to High-Profile Instagram Accounts. It Worked 404 Media
- Instagram AI chatbot tricked by hackers to give access to others' accounts BBC
- Hackers trick Meta AI support bot to infiltrate Obama White House Instagram account The Guardian
- Former President Barack Obama’s Instagram account hacked Yahoo
Want the full story? Read the original reporting
Read on Ars Technica