June 15, 2026 AI agents expose the security checks you never actually wrote How attackers took twenty thousand Instagram accounts by asking Meta's AI politely, and why that failure is about to become common. Earlier in June, attackers took control of more than twenty thousand Instagram accounts, including the dormant Obama-era White House account, without writing an exploit or guessing a single password. They opened a chat with Meta's AI support assistant, asked it to attach an email address they controlled to an account they did not own, and requested a password reset to that address. Meta later confirmed what the logs already showed: the assistant behaved exactly as designed, while a separate part of the system was supposed to verify that the email belonged to the account, and that check never ran. Calling this an AI mistake misses what happened. The assistant carried out a valid sequence of permitted operations for whoever was talking to it. What would have stopped the attack was a person: a support worker who saw a stranger rerouting a celebrity's recovery email, sensed something was wrong, and refused. A large share of real-world authorization was never written as software at all. Instead, it lived in the discretion of whoever stood between a request and the system, and everything behind them was built assuming that discretion would always be there. Put an agent in that seat and discretion vanishes, while nothing and nobody downstream notices. The agent does not bypass your security model, i justt exposes the part of it that was a person. A confused deputy with a chat window Security has a precise term for what Meta hit: the confused deputy. A process holding real privileges is talked by a less-privileged party into using those privileges on its behalf. No clear? It's the night guard who unlocks the vault for anyone who calls and says the boss sent them: he's got the keys, they've just got a good story. The canonical 1988 case was a comp
Back to Home
AI agents expose the security checks you never actually wrote
B
Blizine Admin
·2 min read·0 views
B
Blizine Admin
View Profile Staff Writer
Related Articles
We've all pressed Ctrl+C a million times. Linux solved this in the 1980s — the rest of us didn't.
Jun 17, 2026·2 min read
CBC Bit Flipping Explained: Why Encryption Alone Doesn't Guarantee Integrity
Jun 17, 2026·2 min read
Building Better Product Experiences Through Quiet Improvements
Jun 17, 2026·1 min read