Over the past few days, a number of major Instagram accounts, such as the defunct Obama White House account and the Sephora company account, were seemingly hacked, and now it has become clear that this was likely related to a security incident at Meta. According to numerous reports, hackers were able to trick Meta’s AI-powered support chatbot into attaching attacker-controlled email addresses to Instagram accounts they did not own, enabling password resets and account takeovers. Back in March, Meta had announced that it would be letting AI take control over these sorts of customer service issues, including resets for forgotten passwords. The core of the attack centered on Meta’s recently expanded AI support chatbot, which the company positioned as a faster way to handle account recovery tasks. Hackers began by using a VPN to route their connection through an IP address close to the target account owner’s usual location or hometown. This made the request look like it came from a familiar place.…