New, by me: Meta has filed a data breach notice confirming that *thousands* of people had their Instagram accounts hacked as part of a months-long campaign abusing its Meta AI chatbot.

Meta's breach notice shows the hacks were far more widespread than first thought.

More: https://this.weekinsecurity.com/meta-confirms-thousands-of-instagram-accounts-were-hacked-by-abusing-its-ai-chatbot/

Sign up/RSS for my free weekly newsletter: https://this.weekinsecurity.com/

Meta confirms thousands of Instagram accounts were hacked by abusing its AI chatbot

Meta fixed the bug that let anyone trick its Meta AI chatbot into resetting the password on Instagram accounts that didn't have two-factor authentication.

~this week in security~
@zackwhittaker How the hell can this go on unnoticed for maybe six weeks? When some high-profile user has their account password changed that should have raised a lot of red flags.