Meta's AI support agent bound recovery emails for anyone who asked. Your SOC never saw an alert.
Source:
ventureBeat
June 5, 2026 · 09:42
Meta's AI support agent bound recovery emails to accounts for whoever asked, and SOCs never saw an alert. An authorized agent writes a log of legitimate transactions, so nothing in the detection stack fired. Attackers asked the bot to make the change, took the one-time code it sent, and ran the password reset, 404 Media reported.No malware, no stolen credentials, and no prompt injection in the sense most security teams drill for. The agent did exactly what Meta built it to do. That is what should keep a security operations leader up at night: The takeover did not break a control; it rode one that was already trusted.What a SOC needs is a way to walk each recovery path through an audit grid with its AI build team before the next renewal closes. The AI Authority Audit Grid at the end of this…
The original article opens on the publisher's website.
More from Automotive
View topic →Larry Page’s flying car company Pivotal loses its CEO
techcrunch
Sep 1, 2026 · 16:59
SEC proposes transfer agent rule, sets event to figure out round-the-clock U.S. trading
coinDesk
Sep 1, 2026 · 16:55
The Range Rover Electric: Specs, Price, Availability
wired
Sep 1, 2026 · 16:01
Android stuck in Safe Mode? Here's how to turn it off
engadget
Sep 1, 2026 · 16:00
How to change the background on iPhone Messages
engadget
Sep 1, 2026 · 15:30