New, by me at this.weekinsecurity.com: Meta has filed a data breach notice confirming *thousands* of people had their Instagram accounts hacked as part of a months-long campaign abusing its Meta AI chatbot.
Meta's breach notice shows the account hijacks were far more widespread than first thought.
Meta fixed the bug that let anyone trick its Meta AI chatbot into resetting the password on Instagram accounts that didn't have two-factor authentication.