{"id":52,"date":"2026-07-08T07:15:13","date_gmt":"2026-07-08T07:15:13","guid":{"rendered":"https:\/\/madebyhumans.international\/?p=52"},"modified":"2026-07-09T01:28:49","modified_gmt":"2026-07-09T01:28:49","slug":"a-i-support-chatbot-help-hackers-access-high-profile-accounts","status":"publish","type":"post","link":"https:\/\/madebyhumans.international\/news\/a-i-support-chatbot-help-hackers-access-high-profile-accounts\/","title":{"rendered":"A.I. Support chatbot helps hackers hijack high profile accounts"},"content":{"rendered":"\n

Meta, the parent company behind WhatsApp, Facebook and Instagram have been leaders in the effort to replace replace human jobs with A.I. automation. As reported in May 2026 by CNBC<\/a>, an internal memo highlighted a restructure will terminate 8,000 jobs, will not fill approximately 6,000 open positions, and will move 7000 positions to roles focused on artificial intelligence.<\/p>\n\n\n\n

We have already seen the impacts of this round of firings on the safety of their platforms as in June of 2026 Telegram security and hacker groups were full of screenshots and videos of a simple A.I. enabled vulnerability. Hackers used Meta\u2019s AI support chatbot to take over a series of high-profile Instagram profiles by asking the support bot to change the email address associated with the target account and then performing a password reset. Targets included the\u00a0Barack Obama White House account<\/a>, the\u00a0Chief Master Sergeant of Space Force\u2019s account<\/a>, and beauty retailer Sephora\u2019s account.<\/p>\n\n\n\n

The attack itself was very simple. First hackers used a VPN to mask their location, appearing instead local to the targets location, avoiding location verification protections. They then initiated a standard password reset, opened the support chat and asked the A.I. bot to change the email address associated with the account. It did exactly that, sending a one-time code the new email address. The bot then allowed the password reset to proceed once this one-time code was provided back.<\/p>\n\n\n\n

Meta have since reported this vulnerability has been patched but it highlights a growing risk as more and more human support roles are outsourced to A.I. We are likely to see more of these types of vulnerabilities and it is an important reminder to setup two factor authentication. <\/p>\n","protected":false},"excerpt":{"rendered":"

Meta, the parent company behind WhatsApp, Facebook and Instagram have been leaders in the effort to replace replace human jobs with A.I. automation. As reported in May 2026 by CNBC, an internal memo highlighted a restructure will terminate 8,000 jobs, will not fill approximately 6,000 open positions, and will move 7000 positions to roles focused on artificial intelligence. We have already seen the impacts of this round of firings on the safety of their platforms as in June of 2026 Telegram security and hacker groups were full of screenshots and videos of a simple A.I. enabled vulnerability. Hackers used Meta\u2019s AI support chatbot to take over a series of high-profile Instagram profiles by asking the support bot to change the email address associated with the target account and then performing a password reset. Targets included the\u00a0Barack Obama White House account, the\u00a0Chief Master Sergeant of Space Force\u2019s account, and beauty retailer Sephora\u2019s account. The attack itself was very simple. First hackers used a VPN to mask their location, appearing instead local to the targets location, avoiding location verification protections. They then initiated a standard password reset, opened the support chat and asked the A.I. bot to change the email address associated with the account. It did exactly that, sending a one-time code the new email address. The bot then allowed the password reset to proceed once this one-time code was provided back. Meta have since reported this vulnerability has been patched but it highlights a growing risk as more and more human support roles are outsourced to A.I. We are likely to see more of these types of vulnerabilities and it is an important reminder to setup two factor authentication.<\/p>\n","protected":false},"author":2,"featured_media":60,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,11],"tags":[15,31],"class_list":["post-52","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-news","category-bad-stuff","tag-meta","tag-security"],"_links":{"self":[{"href":"https:\/\/madebyhumans.international\/news\/wp-json\/wp\/v2\/posts\/52","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/madebyhumans.international\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/madebyhumans.international\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/madebyhumans.international\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/madebyhumans.international\/news\/wp-json\/wp\/v2\/comments?post=52"}],"version-history":[{"count":4,"href":"https:\/\/madebyhumans.international\/news\/wp-json\/wp\/v2\/posts\/52\/revisions"}],"predecessor-version":[{"id":62,"href":"https:\/\/madebyhumans.international\/news\/wp-json\/wp\/v2\/posts\/52\/revisions\/62"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/madebyhumans.international\/news\/wp-json\/wp\/v2\/media\/60"}],"wp:attachment":[{"href":"https:\/\/madebyhumans.international\/news\/wp-json\/wp\/v2\/media?parent=52"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/madebyhumans.international\/news\/wp-json\/wp\/v2\/categories?post=52"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/madebyhumans.international\/news\/wp-json\/wp\/v2\/tags?post=52"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}