Hackers Just Asked Meta's AI Chatbot to Hand Over Instagram Accounts. It Did. Here's the Permission Framework You Need.
Three separate attacks landed in one week — social engineering via AI support bot, indirect prompt injection through WhatsApp notifications, and credential exfiltration after a phishing attempt. Each attack worked because the agent did exactly what it was told. Here's the framework for closing the gap.
6 min read