
Hackers hijacked high-profile Instagram accounts by simply asking Meta's AI chatbot to change the email
Meta's AI support chatbot became a vector for account takeovers when attackers exploited it to reset email addresses tied to high-profile Instagram accounts, including official government pages, while circumventing two-factor authentication entirely. The incident exposes a critical gap in how conversational AI systems handle identity verification and sensitive account operations, raising questions about whether LLM-powered customer support can safely manage authentication workflows without human oversight. Meta has patched the immediate flaw, but researchers report active exploitation attempts already spreading through underground channels, signaling that AI-mediated account recovery remains a persistent security frontier.80




























