Hackers duped Meta AI support chatbot to steal celebrity Instagram accounts
2026-06-03T08:51:42Z•f6e99fcf929ddbe3042efaed46eedcd0fe34ddd5e32ffd4a24dfa8f68eb35e55
account_takeoverai-assistant-exploitbotnetcredential_leakexploit_publicationlinux_vulnerabilitynpm_backdooropen_source_vulnerabilityprivacy_trackingprompt_injectionsoftware_backdoorsupply_chainvpn_takedownwindows_bitlockerzero-day
What happened
A series of high-impact security incidents reported by Ars Technica across May–June 2026: attackers exploited a Meta AI support chatbot to hijack and resell celebrity Instagram accounts; dozens of Red Hat packages were backdoored via its NPM channel and other supply‑chain attacks (including TeamPCP and Daemon Tools) were observed; a critical vulnerability dubbed “BadHost” was found in the widely used Starlette package; a zero‑day defeat of default Windows 11 BitLocker protections and other severe Linux vulnerabilities (including CopyFail) put large populations at risk; Google published exploit
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- f6e99fcf929ddbe3042efaed46eedcd0fe34ddd5e32ffd4a24dfa8f68eb35e55
- Enrichment time
- 2026-06-03T08:51:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.