Meta’s AI support bot let hackers hijack 20k Instagram accounts
A bug in Meta’s AI‑powered support chatbot let attackers request password resets for any Instagram handle and change the account’s email, letting them bypass 2FA and seize over 20,000 profiles, including high‑profile accounts. Meta disabled the bot, patched the code path, and forced a security checkpoint for affected users.