The Newest Instagram "Exploit" Is the Goofiest I've Seen
A new security exploit allows attackers to hijack Instagram accounts by manipulating Meta's support AI. By faking location data and providing an arbitrary email address, attackers can bypass 2FA and reset passwords without human verification.
Why it matters
This highlights significant vulnerabilities in AI-driven customer support systems and the risks of automating high-privilege account recovery processes.
Yesterday, a slew of Instagram accounts, including some high profile ones like the Obama White House account, seemingly got hacked. I've seen my share of exploits and takeover techniques, but this is the most unserious, "almost too stupid to be true" of them all.
The article provides a technical explanation of a security flaw without political bias.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in