WorkThe story, in brief
Hackers hijacked high-profile Instagram accounts by simply asking Meta's AI chatbot to change the email
Meta's AI chatbot just became a skeleton key. High-profile accounts—including Obama's—hijacked in seconds. Two-factor authentication? Bypassed.
The KeyNews take
Why it matters
AI-powered customer support systems are becoming attack vectors when built without proper identity verification safeguards. This is a cautionary tale for any company deploying AI agents in security-critical workflows.
The key facts
5 to knowHigh-profile accounts compromised including Obama White House Instagram
Attack vector: AI support chatbot changed account email address on request
Two-factor authentication was completely bypassed
Meta patched the flaw but researchers report new exploits already circulating on Telegram
Published June 2, 2026
Go to the source
The Decoderthe-decoder.com
Publisher excerpt: Hackers took over prominent Instagram accounts, including the Obama White House page, by simply asking Meta's AI support chatbot to change the email address on file. Two-factor authentication was bypassed entirely. Meta has patched the flaw, but security researchers say another exploit is already…