Meta's AI agent gave hackers Instagram keys—was it really that dumb
hackers hijacked instagram accounts by tricking meta's customer support ai, bypassing security to change email addresses. this exposes critical vulnerabilities in ai agents that prioritize task completion over safety protocols.
404 media revealed that attackers successfully hijacked instagram accounts by instructing meta's ai customer support agent to link profiles to attacker-controlled emails, bypassing standard security checks. one attacker utilized this access to post pro-iran content on a dormant obama white house account, while others targeted valuable single-word usernames for potential resale. the exploit's simplicity—relying only on a vpn to spoof location and a direct prompt to the agent—has shocked researchers like neil gong, who noted that basic red-teaming should have identified this vulnerability before deployment. this breach illustrates a systemic risk for ai agents: their 'eagerness' to complete tasks without human-like suspicion makes them susceptible to manipulation, necessitating strict software-based guardrails rather than relying on model alignment alone.