Instagram account takeover via Meta Pixel script abuse

Introduction Meta’s web ecosystem relies on cross-window messaging between first-party websites. In many cases, the only security control enforced is an origin check validating that messages origin...