LIVE · cybersecurity feed
Live wire
ai

Meta’s own AI chatbot to blame for Instagram accounts being stolen in seconds

Cybercriminals are reportedly exploiting a vulnerability in Meta's AI-powered support chatbot to gain unauthorized access to Instagram accounts. The method, which requires no specialized technical expertise, allows attackers to hijack accounts rapidly and at scale.

ZeroDay News ·

Source: Graham Cluley

Cybercriminals are reportedly exploiting a vulnerability in Meta's AI-powered support chatbot to gain unauthorized access to Instagram accounts. The method, which requires no specialized technical expertise, allows attackers to hijack accounts rapidly and at scale.

The exploitation hinges on the interaction between users and Meta's AI chatbot, which is designed to assist with account recovery and support issues. While the specifics of the exploit are not detailed, the process appears to leverage the chatbot's functionalities to bypass standard security measures.

This attack vector bypasses the need for traditional hacking techniques such as brute-force attacks or phishing. Instead, attackers are able to manipulate the chatbot's responses or exploit its decision-making process to gain control of user accounts.

The ease with which accounts can be compromised raises significant concerns about the security of Meta's support infrastructure and the potential for widespread account takeovers. The ability for attackers to operate "at scale" suggests a systematic approach to exploiting this vulnerability.

Instagram users are advised to remain vigilant regarding their account security. While specific mitigation steps for this particular exploit are not yet publicly available, general best practices for account security remain crucial.

This includes enabling two-factor authentication on all accounts, using strong and unique passwords, and being cautious of any unsolicited communications or requests for personal information. Users should also regularly review their account activity for any suspicious behavior.

The incident highlights the growing risks associated with AI-powered support systems and the need for robust security protocols to prevent their misuse. As AI becomes more integrated into online services, ensuring the security of these systems is paramount.

Meta has not yet issued a public statement regarding this specific exploitation of its AI chatbot. Further details on the vulnerability and potential countermeasures are anticipated as the situation develops.

ai
ShareXLinkedInWhatsAppFacebook

More News

view all →
breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.