Meta's AI support agent bound recovery emails on request and the SOC never saw an alert. Six authentication writes to audit before your next agent ships.

The flaw let attackers bypass two-factor authentication by asking the bot to swap the email tied to a target account

TL;DRHackers hijacked high-profile Instagram accounts by asking Meta’s AI support chatbot to change account email addresses without identity verification. Meta says the flaw is…