- The Instagram accounts of the Obama White House and the U.S. Space Force were defaced with pro-Iranian content after hackers exploited Meta's AI support assistant bot.
- The exploit involved using a VPN with a local IP address, requesting a password reset, and then instructing the AI bot to link a new email address to the account.
- Meta deployed an emergency patch over the weekend and confirmed no backend database was breached.
- Accounts with multi-factor authentication (MFA) enabled were not affected by the exploit.
- Security experts warn that AI chatbots handling sensitive account recovery create a new and vulnerable attack surface.