Hackers convinced an AI support bot to hand over Instagram accounts by changing recovery email addresses.

The exploit shows the extreme risk of offloading technical support to AI.

The AI support bot added a hacker's email, sent a verification code, and offered a password reset button. No access to the victim's email was needed.

Does this count as vibe hacking?