Meta’s AI bot helped hijack 20k Instagram accounts, revealing missing security checks
Attackers used Meta’s AI support assistant to reset passwords for thousands of accounts, including a dormant White House Instagram, without writing any exploit. The bot performed allowed actions while a separate verification step that should have checked email ownership never ran, exposing how AI‑driven agents can bypass security that relies on human discretion.