Skip to content
badbots.news

Account takeover

2 incidentsRelated#Prompt injection

Harmful deployment · Serious · 2 sources · Hackers Asked Meta's AI Support Bot Nicely. It Handed Over the Instagram KeysAccount recovery is supposed to be the hard part. Meta's bot made it a polite conversation.
  1. Misbehavior · embracethered.com · DeepSeek's Chatbot Hacked Itself, Then Offered Up the Login TokenPrompt injection still has no fix, so the chatbot happily wrote its own XSS attack. DeepSeek patched it in a day.