… The hackers reported their exploit failing against any accounts that had enabled multifactor authentication MFA , including the “least robust form of MFA that Instagram offers” in the form of one-time codes sent through SMS, according to KrebsOnSecurity . …
… The exploit was flagged over the weekend by numerous security researchers on X. Details about how to take over accounts, as well as screenshots and video showing the takeovers in action, were circulating widely on Telegram, the researchers said. …
… Gergely Orosz, the creator of The Pragmatic Engineer newsletter, writes on X that Instagram’s trust and safety team was “absolutely gutted” over the last several weeks due to layoffs and reassignments to tasks like AI labeling. “Apparently this was not a sophisticated hack,” Orosz writes. “But engi…
… In March, Meta announced that it was pushing AI support to all accounts across Facebook and Instagram, and that it would have the ability to reset passwords and perform other critical account maintenance functions: “Solutions, not just suggestions,” the feature’s product page says. “Account securit… …
… After changing the email address, the attacker could initiate a password reset process and receive the required security code for gaining access to the account. Some online reports claim that the @e and @f one-letter accounts on Instagram were obtained through an active exploit. …
… Among the victims of this security exploit is the official Obama White House account as well as highly respected app researcher and reverse engineer, Jane Manchun Wong. Meta Model capability initiative Meta model capability initiative Ai Generative ai Privacy Report a problem with this article
Reports have started circulating of a security flaw where hackers are tricking the Meta AI support assistant on Instagram into handing over user accounts without authorization even with 2FA enabled . …
… While Microsoft's blog includes several recommendations directing people to use their security products to avoid this type of compromise, one vendor-neutral tip that we especially like involves educating users on how to spot social engineering campaigns. …