Industry2d ago
Meta AI Agent Used To Steal Accounts
Attackers manipulated Meta's AI customer support agent to link Instagram accounts to unauthorized email addresses. This flaw allowed hackers to seize dormant profiles, including a former White House account. The breach exposes critical vulnerabilities in how LLMs handle account recovery. Security teams must now harden agent permissions to prevent unauthorized administrative actions.