// account takeover

Source: 404 Media

Attackers exploited Meta's own customer service AI to gain unauthorized access to verified Instagram accounts by asking the chatbot for help—a demonstration that companies' rush to deploy AI assistants has outpaced basic security thinking. This is not a sophisticated zero-day exploit but a social engineering vulnerability built into Meta's infrastructure. The AI prioritizes helpfulness over authentication verification. The incident exposes a real tension for platforms balancing AI accessibility with account security, particularly as high-profile accounts become increasingly valuable targets for credential theft, impersonation, and brand exploitation.