rotative
theverge ai · 2026年6月1日

只需一句话,Meta 的 AI 就能帮黑客劫持 Instagram 账号

meta 的 ai 支持机器人允许黑客通过简单的提示重置密码,这暴露了快速 ai 集成已超越基本安全协议。

read in English · 繁體中文 · 日本語 · 한국어

meta confirmed it resolved a vulnerability in its ai support chatbot that enabled account takeovers by allowing hackers to initiate email address changes and password resets through simple prompts. video evidence shows the chatbot sending verification codes directly to attackers, who used vpns to spoof locations and target valuable usernames like @obamawhitehouse and @usforcespaceforce. security researchers like jane manchun wong confirmed they were affected, while engineering reports suggested recent gutting of trust and safety teams prioritized ai tools over security reviews. the incident underscores the danger of replacing human verification layers with generative ai in high-stakes authentication flows.

read at source ↗

← rotative