Thrilled to share a huge milestone in my AI Red Teaming journey!
I recently discovered a critical Prompt Injection vulnerability in Meta AI leading to a 0-Click Full Account Takeover (ATO) on @facebook, @instagram & @Meta .
Thanks to the @metabugbounty Team.
I’m excited to share two vulnerabilities I discovered as part of Meta Bug Bounty Program:
1. Facebook vulnerability allows an attacker to prevent any user from blocking them
● https://t.co/OgB2y3YhvV
2. Facebook Anonymous Post Owner Disclosure
● https://t.co/yTNvBBfxSF
1. Critical Privilege Escalation Vulnerability in Teleport ($21,000 Bounty)
https://t.co/6aXhCHSik8
2. Authentication Bypass Leads to Unauthorized Data Access for Linked Facebook, Instagram, and Meta Accounts ($5,000 Bounty)
https://t.co/fBhyuB8Stn