Meta 봇, 단순히 요청만으로 해커가 Instagram 계정을 탈취할 수 있게 하다
Meta의 AI 지원 봇이 간단한 프롬프트만으로 해커가 비밀번호를 재설정하도록 허용했으며, 빠른 AI 통합이 기본적인 보안 프로토콜을 앞서가고 있음을 드러냈다.
meta confirmed it resolved a vulnerability in its ai support chatbot that enabled account takeovers by allowing hackers to initiate email address changes and password resets through simple prompts. video evidence shows the chatbot sending verification codes directly to attackers, who used vpns to spoof locations and target valuable usernames like @obamawhitehouse and @usforcespaceforce. security researchers like jane manchun wong confirmed they were affected, while engineering reports suggested recent gutting of trust and safety teams prioritized ai tools over security reviews. the incident underscores the danger of replacing human verification layers with generative ai in high-stakes authentication flows.