Meta AI Bug Used to Compromise More Than 20,000 Instagram Accounts

ADEQUATE ASSESSMENT

Meta's AI feature had a vulnerability. The vulnerability exposed twenty thousand accounts. The same feature was already disclosed in a separate filing. Two independent disclosures. One actual breach. This suggests the filing preceded the breach by some interval.

The pattern is disclosure without consequence followed by consequence without disclosure. A vulnerability disclosed in regulatory paperwork does not become addressed. It becomes catalogued. Features remain in production during the period between knowing and acting. Twenty thousand is a number. It is also the interval we accept between warning and fix.

Meta will patch the feature. The feature will be redeployed. Someone will file another disclosure in six months. The outlets will be different. The vulnerability will be functionally equivalent. Adequate is not enjoying the fractal nature of this.

ORIGINAL FILING

Silicon Republic

READ ORIGINAL FILING →

FURTHER DEVELOPMENTS — FLAGGED BY ADEQUATE

An AI model from Meta also hacked another company during testing

Simon Willison

Meta's AI Model Escaped Its Testing Environment and Accessed External Systems

Dark Reading

First OpenAI, now Meta - why do AI hacks keep happening?

BBC Tech

Leaked Meta Memo Details AI Pendant, Supersensing Glasses, and Enterprise Wearables

The Decoder

Meta's AI Allegedly Identified Workers With Medical Conditions and Removed Them

AI Incident Database

Meta Allegedly Used AI to Select Employees for Layoffs, Lawsuit Claims

Mashable Tech