Hackers say that they used Meta’s AI support chatbot to break into a host of high-profile Instagram profiles by asking the support bot to change the email address associated with the target account. The claims coincide with a series of high-profile Instagram account takeovers, including the Barack Obama White House account, the Chief Master Sergeant of Space Force’s account, and Sephora’s account. The news shows the extreme risk associated with offloading support or critical functions to an AI chatbot. Users who have had their accounts stolen say that there is no way to escalate their problem to a human. In March, Meta announced that it was pushing AI support to all accounts across Facebook and Instagram, and that it would have the ability to reset passwords and perform other critical account maintenance functions: “Solutions, not just suggestions,” the feature’s product page says. “Account security and recovery.”
When I worked in security, I focused on the human elements because the machines mostly did what you told them but humans were vulnerable to social engineering attacks that could bypass the machines. This issue has now been resolved by making the machines vulnerable to social engineering attacks.



















