Hackers likely hijacked over 20,000 Instagram accounts with Meta’s AI chatbot

Hackers apt took implicit 20,225 Instagram accounts utilizing Meta's AI enactment chatbot, the institution confirmed successful a announcement filed with the authorities of Maine. In the notice, spotted earlier by Bleeping Computer, Meta blames a "bug" for the exploit that allowed attackers to hijack accounts without two-factor authentication simply by asking the chatbot for a password reset:

The instrumentality itself worked decently and functioned arsenic intended; nevertheless owed to a bug successful a abstracted codification path, the strategy did not decently verify that the email code provided by the idiosyncratic requesting a password reset matched the email code associated with that user's Instagram …

Read the afloat communicative astatine The Verge.