Meta said a flaw in its AI-assisted Instagram recovery system led to the takeover of more than 20,000 accounts. The disclosure says attackers used password reset links to bypass protection on accounts without two-factor authentication.
·