AI agents are a confused deputy with the keys to your kingdom

How attackers took twenty thousand Instagram accounts by asking Meta's AI politely, and why that failure is about to become common.