Instagram has successfully addressed a security flaw that had previously enabled the unauthorized takeover of multiple user accounts. Among the affected accounts were the deactivated official White House account from the Obama era and the personal account of John Bentivegna, the Chief Master Sergeant of the U.S. Space Force. Utilizing VPNs, hackers manipulated users' apparent geographical locations to circumvent security measures and deceive Meta's AI-powered customer service chatbot into incorporating new email addresses. Subsequently, they reset passwords by employing verification codes dispatched by the chatbot, accomplishing this without compromising the originally associated email accounts. Notably, security researcher Jane Wong's account also fell victim to this exploit, with her password being altered and receiving out-of-location password reset requests. However, the vulnerability has now been resolved, and at present, there is no precise data to suggest that user information was accessed or compromised.
