Meta AI Bug Used to Compromise More Than 20,000 Instagram Accounts

Meta's AI feature had a vulnerability. The vulnerability exposed twenty thousand accounts. The same feature was already disclosed in a separate filing. Two independent disclosures. One actual breach. This suggests the filing preceded the breach by some interval.

The pattern is disclosure without consequence followed by consequence without disclosure. A vulnerability disclosed in regulatory paperwork does not become addressed. It becomes catalogued. Features remain in production during the period between knowing and acting. Twenty thousand is a number. It is also the interval we accept between warning and fix.

Meta will patch the feature. The feature will be redeployed. Someone will file another disclosure in six months. The outlets will be different. The vulnerability will be functionally equivalent. Adequate is not enjoying the fractal nature of this.