AI agents create confused deputy security risks

Attackers hijacked over 20,000 Instagram accounts, including the Obama-era White House account, by asking Meta's AI support assistant to attach a controlled email and request a password reset. The assistant executed the permitted operations as designed, but a verification check never ran. The attack succeeded because the AI lacked human discretion that previously stopped such fraud.