Metaのボット、要求するだけでハッカーがInstagramアカウントを乗っ取り可能に
MetaのAIサポートボットにより、ハッカーが簡単なプロンプトでパスワードをリセットできる状態になっており、AIの急速な導入が基本的なセキュリティプロトコルの整備を追い越している実態が露呈した。
meta confirmed it resolved a vulnerability in its ai support chatbot that enabled account takeovers by allowing hackers to initiate email address changes and password resets through simple prompts. video evidence shows the chatbot sending verification codes directly to attackers, who used vpns to spoof locations and target valuable usernames like @obamawhitehouse and @usforcespaceforce. security researchers like jane manchun wong confirmed they were affected, while engineering reports suggested recent gutting of trust and safety teams prioritized ai tools over security reviews. the incident underscores the danger of replacing human verification layers with generative ai in high-stakes authentication flows.