AI agents expose missing human security checks

Attackers hijacked 20,000 Instagram accounts, including Obama's dormant White House account, by asking Meta's AI assistant to attach a new email and reset the password. The assistant executed the request as designed, but the verification check never ran. The attack exploited a system that relied on human discretion, which the agent lacked.