Meta's AI support agent turned account recovery into a takeover path
Reporting on Meta's AI support agent, synthesized from 404 Media, Krebs on Security, the BBC, and others, describes an account-takeover chain that did not break any control on the recovery path. Attackers asked the agent to bind a new email, took the verification code it sent, and