A professional hacker discovered what he considered a fairly simple way to seize control of any Instagram user's account. Muthiyah found the account-breaking bug in the mobile version of Instagram's password reset system. When a user wants to reset his or her password, Instagram tries to validate their identity by sending a 6-digit code to a recovery phone number. That might sound like a Herculean task, but Muthiyah notes that it's actually quite simple using cloud-based tools. Now, it's not likely that hackers would have shelled out $150 to break in to just any old Instagram account.
Source: Forbes July 15, 2019 21:56 UTC