August 16, 2026

Meta's AI support agent bound recovery emails for anyone who asked. Your SOC never saw an alert.

man in white dress shirt sitting beside woman in black shirt
ThisisEngineering / Unsplash

Meta's AI support agent bound recovery emails to accounts for whoever asked, and SOCs never saw an alert. An authorized agent writes a log of legitimate transactions, so nothing in the detection stack fired. Attackers asked the bot to make the c...