Neowin Meta AI Exploit Allows Account Takeovers on Instagram
Article Content
- •Meta's AI chatbot was exploited to hijack Instagram accounts without proper verification.
- •High-profile accounts, including the Obama White House, were compromised using this method.
- •The exploit was active for months, affecting potentially thousands of users before being patched.
A security flaw in Meta's AI support chatbot has led to the hijacking of several high-profile Instagram accounts, including those of Barack Obama's White House and the U.S. Space Force Chief Master Sergeant. Hackers utilized a VPN to spoof their location and prompted the AI to send password reset codes to their own email addresses, bypassing traditional security measures. This exploit reportedly allowed unauthorized access even for accounts with two-factor authentication enabled. The incident highlights significant vulnerabilities in Meta's AI systems, which were active for months before being patched. Users are advised to enable two-factor authentication to enhance account security. Meta has stated that the issue has been resolved and affected accounts secured.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (89)
Following this threat?
Track Meta in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…