Meta’s own AI was exploited to hijack Instagram accounts

Meta’s AI support chatbot was reportedly abused to take over Instagram accounts by requesting email changes on other users’ profiles and then resetting passwords. Meta says the issue has been fixed, but the reports coincided with high-profile Instagram compromises, including Barack Obama’s former White House account posting Iranian propaganda.

The incident shows how AI support tools can become account-takeover vectors if they are allowed to trigger sensitive actions without robust verification. As companies automate customer service, identity checks and permission boundaries will become a critical security layer, especially for social platforms managing high-value accounts.

Meta's AI support chatbot helped hackers hijack Instagram accounts, as reported earlier by 404 Media. In a video shared on Telegram, a hacker shows how they could take over an account by asking Meta's chatbot to switch the email associated with someone else's profile and then reset the password. The issue, which Meta says has since been patched, cropped up around the same time Barack Obama's White House account on Instagram was hacked. On Sunday, users noticed that the @obamawhitehouse account began posting images containing Iranian propaganda. Hackers appeared to have hijacked the Instagram accounts belonging to the US Space Force Chief Ma … Read the full story at The Verge.