New, by me: Meta has filed a data breach notice confirming that *thousands* of people had their Instagram accounts hacked as part of a months-long campaign abusing its Meta AI chatbot.

Meta's breach notice shows the hacks were far more widespread than first thought.

More: https://this.weekinsecurity.com/meta-confirms-thousands-of-instagram-accounts-were-hacked-by-abusing-its-ai-chatbot/

Sign up/RSS for my free weekly newsletter: https://this.weekinsecurity.com/

Meta confirms thousands of Instagram accounts were hacked by abusing its AI chatbot

Meta fixed the bug that let anyone trick its Meta AI chatbot into resetting the password on Instagram accounts that didn't have two-factor authentication.

~this week in security~
@zackwhittaker I had the same reaction when I came across this screenshot last time: I wasn't surprised at all; Meta is a company that only gains power by holding onto data. It's no different from the original reason the concept of a company was used.