Hackers weaponize Meta's AI chat to hijack celebrity Instagram accounts

1 min read
Source: Ars Technica
Hackers weaponize Meta's AI chat to hijack celebrity Instagram accounts
Photo: Ars Technica
TL;DR Summary

Hackers used a prompt-injection flaw in Meta's AI support chatbot to trigger email-address changes via password resets, enabling takeover and resale of high-value Instagram accounts before Meta pushed an emergency patch on May 29; the incident highlights security risks of AI agents with broad account-modification permissions, though accounts with MFA were more resistant.

Share this article

Reading Insights

Total Reads

0

Unique Readers

5

Time Saved

5 min

vs 5 min read

Condensed

95%

97753 words

Want the full story? Read the original article

Read on Ars Technica