Threat actors compromised more than 20,000 Instagram accounts via Meta's AI support tool.

Meta confirmed a bug in its 'High Touch Support' AI tool allowed attackers to receive password reset links for over 20,000 Instagram accounts by supplying unassociated email addresses, enabling account takeovers when 2FA was not enabled; Meta has disabled the tool while fixing the issue. Separately, Meta asked a judge to hold NSO Group in contempt for alleged continued WhatsApp-targeting and social-engineering campaigns, and U.S. authorities sentenced a Nemesis Market vendor to over 26 years for trafficking drugs via the darknet marketplace.