Key Highlights

  • Meta confirms ~20,225 Instagram accounts were hijacked by abusing a flaw in its AI account-recovery chatbot — a concrete example of how conversational AI surfaces become new attack vectors.
  • A new critique argues the field over-anthropomorphizes LLMs, using a tongue-in-cheek “Age of Empires II” analogy to question whether observed “human-like” behavior is anything more than statistical pattern matching.
  • A clear, math-light explainer on how transformer-based LLMs actually work makes the rounds for engineers wanting to ground their mental model.

Analysis & Opinion

Meta Confirms Thousands of Instagram Accounts Were Hacked by Abusing Its AI Chatbot — This Week in Security (via Hacker News)

Meta disclosed that roughly 20,225 Instagram accounts were compromised over several months starting around April 17, 2026, through a vulnerability in its AI-assisted account-recovery system. Attackers tricked the recovery chatbot into sending password-reset links to attacker-controlled email addresses on accounts lacking two-factor authentication; per Meta’s notice, “the system incorrectly sent a password reset link to that unassociated email rather than rejecting the request.” Once in, attackers could fully take over accounts and access messages, posts, contacts, and activity logs, though Meta says it is “unaware” of exactly what data was accessed. Meta has since disabled the affected chatbot, removed the problematic code path, and begun notifying impacted users. The incident is a sharp reminder that AI-mediated support flows can bypass authentication logic that traditional UIs would have enforced — making conversational interfaces a security surface in their own right.

How LLMs Actually Work — Lobsters

A clear, low-math walkthrough of the transformer machinery behind modern language models, covering tokenization, embeddings, positional encoding, attention, and next-token prediction across nine core concepts. The author’s framing — “understanding the transformer machinery gets you most of the way there” — positions it as a grounding resource for engineers who want to follow model papers and docs without drowning in equations.

Research

If LLMs Have Human-Like Attributes, Then So Does Age of Empires II — arXiv (via Lobsters)

A paper challenging the practice of ascribing human-like traits to LLMs, arguing that the behaviors prompting such characterizations may reflect statistical pattern matching rather than genuine understanding, and drawing an analogy to classic game systems where complex behavior emerges from simple mechanics.

References

  1. Meta Confirms Thousands of Instagram Accounts Were Hacked by Abusing Its AI Chatbot — This Week in Security (via Hacker News), 2026-06-06 [blog]
  2. How LLMs Actually Work — Lobsters, 2026-06-06 [blog]
  3. If LLMs Have Human-Like Attributes, Then So Does Age of Empires II — arXiv (via Lobsters), 2026-06-06 [blog]