Meta patches bug that sent Instagram reset links to wrong users

Meta disclosed a vulnerability in its AI-powered High Touch Support (HTS) tool that exposed over 20,000 Instagram accounts to unauthorized access. The flaw allowed third parties to exploit the system, receiving password reset links meant for the actual account holders when incorrect email addresses were provided. Meta has since disabled the HTS tool, invalidated existing password reset links, and implemented security checks to prevent similar incidents. Affected users were urged to reset their passwords and enable two-factor authentication.