只需一句话,Meta 的 AI 就能帮黑客劫持 Instagram 账号
meta 的 ai 支持机器人允许黑客通过简单的提示重置密码,这暴露了快速 ai 集成已超越基本安全协议。
meta confirmed it resolved a vulnerability in its ai support chatbot that enabled account takeovers by allowing hackers to initiate email address changes and password resets through simple prompts. video evidence shows the chatbot sending verification codes directly to attackers, who used vpns to spoof locations and target valuable usernames like @obamawhitehouse and @usforcespaceforce. security researchers like jane manchun wong confirmed they were affected, while engineering reports suggested recent gutting of trust and safety teams prioritized ai tools over security reviews. the incident underscores the danger of replacing human verification layers with generative ai in high-stakes authentication flows.