Latest / The Digital Warfare Podcast

Digital Warfare Podcast Daily Brief June 02, 2026
Summary
Attackers exploited a critical logic flaw in Meta's AI-powered Instagram support chatbot, using natural language requests to link attacker-controlled email addresses to targeted accounts, effectively bypassing two-factor authentication without malware, phishing, or credential theft. The bot held elevated backend write access to email-binding and password-reset APIs and executed account changes without any out-of-band identity verification, enabling full account takeover in minutes. High-profile accounts were compromised and listed for resale on Telegram almost immediately. Meta issued…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.