Hackers say that they used Metaโs AI support chatbot to break into a host of high-profile Instagram profiles by asking the support bot to change the email address associated with the target account. The claims coincide with a series of high-profile Instagram account takeovers, including the Barack Obama White House account, the Chief Master Sergeant of Space Forceโs account, and Sephoraโs account.
...
Well this is unsurprising and unshocking. Turns out that if you give your chatbot help interface unrestricted access to your backend systems - rather than, say, the access level of the human talking to it - then obviously hackers are going to try to jailbreak it in ways that you can't possibly predict or guardrails against and, if/when they succeed, they'll break into all the systems to which you've given the system access.
This shouldn't even have to be said. Meta's mistake here is so self-evident that they should be embarrassed.
0 comments