Meta's AI support agent bound recovery emails for anyone who asked. Your SOC never saw an alert.

Reports say Meta’s AI support agent let attackers rebind recovery emails and reset passwords as authorized actions, creating no SOC alerts. The takeover required no malware or stolen credentials and often bypassed login protections, though MFA reportedly blocked the attack. The incident highlights recovery flows as a major security gap needing external authorization gates and better audit logging.