Congress is increasing its pressure with stronger language in a letter from more members that claims Apple Towson is a "high-performing" store with 100 technologically skilled workers. Apple Towson is closing. Image source: Apple Congress doesn't think Apple should close the Apple Towson store, which also happens to be its first unionized retail store. Nine members said so before , but an additional 39 new members and one returning member have said so again. The letter states outright that the store closure is likely a violation of Section 7 of the National Labor Relations Act. The union representing the store, the International Association of Machinists and Aerospace Workers (IAM) Union, filed an unfair labor practice charge against Apple in April. Continue Reading on AppleInsider | Discuss on our Forums
Meta's AI support assistant has been helping hackers get access to high-profile Instagram accounts, according to reports on social media. With no verification check, Meta AI would change the email address associated with an Instagram account, allowing the password to be updated. Meta introduced its AI support assistant back in December with the aim of making it easier for customers to access 24/7 account support. It can be used for reporting scams, getting information on content removal, and resetting passwords. The latter option is what bad actors were able to exploit. The Instagram vulnerability showed up on social media over the weekend, with demonstrations of the simple steps taken to get access to an account. In one demo , a hacker asks Meta's support bot to change the email address linked to a target Instagram account, and the AI does it without question. Meta's support did not do robust identity verification, and in some cases, it appears it bypassed two-factor authentication. All that was required was a VPN connection set to a location near the target account, which is trivial. Meta appeared to be verifying account ownership based on location. "Our systems recognize the device you usually use and familiar locations better than ever," reads Meta's blog post on its AI support agent. In some cases, users were asked to verify their identity with a selfie , which was bypassed using AI. For a short period of time, the exploit was available to the public, and account takeovers ramped up. One security researcher said Telegram channels that offer black market Instagram services "made lots of $$$" with Meta's AI. 404 Media said hackers have been aware of the exploit since March. Meta patched the issue over the weekend, and today, Meta's VP of communications Andy Stone said the issue has been fixed. Meta is now "securing impacted accounts." Information about the Instagram attack vector comes after hackers were able to take over accounts for Sephora, the Chief Master Sergeant of the Space Force, researcher Jane Manchun Wong, developer Albert Renshaw who owned @albert, and the archived Barack Obama White House account. Multiple other users with desirable Instagram handles reported having their accounts taken. Some users who have had their accounts stolen over the weekend were not able to use the AI to get their accounts back, and there was no option to speak with a human for help. Tags: Instagram , Meta This article, " Meta AI Support Bot Helped Hackers Hijack Instagram Accounts " first appeared on MacRumors.com Discuss this article in our forums
![PSA: A security breach means you must update the ChatGPT Mac app [U]](https://www.apple.com/newsroom/images/default/apple-logo-og.jpg){kind=logo}