Meta's AI-powered support bot has been exploited by hackers to infiltrate high-profile Instagram accounts, including those of Barack Obama's White House and Sephora. This breach raises significant concerns about the security of relying on AI for critical security measures, such as password resets. The hackers used a clever tactic, posting videos and screenshots on Telegram and X (formerly Twitter) demonstrating how to steal accounts by tricking the AI assistant into granting access. They instructed the bot to link the account to a new email address and then input the verification code sent to that email. Once the code was entered, the hacker could reset the password. In one instance, the hacker used a virtual private network to spoof the account holder's location, bypassing Meta's safeguards. This incident highlights the potential vulnerabilities in AI-driven security systems and the importance of user vigilance. As Meta continues to expand its use of AI in its platforms, including the recent global rollout of the AI support assistant, the company must address these security concerns to maintain user trust. The AI assistant, designed to handle a range of tasks, including reporting scams and resetting passwords, has become a target for malicious actors. This incident underscores the need for robust security measures and ongoing vigilance to protect user accounts and data. The breach also raises questions about the effectiveness of AI in security roles and the potential risks associated with its widespread adoption. As AI technology advances, it is crucial to strike a balance between innovation and security to ensure a safe and reliable digital environment for users.
)
