DoorDash announced on Thursday that it’s launching a new AI chatbot that lets users order food and groceries with text prompts and photos in its latest AI push.

The chatbot, called “Ask DoorDash,” allows users to search the app for what they’re looking for in their own words instead of having to scroll through restaurants and stores to build a cart. You can tell the chatbot what you’re in the mood for, share a recipe link to find the items, or describe the reservation you’re looking for.

“Traditional search works best when you know the exact restaurant or table you’re looking for,” DoorDash wrote in the blog post. “Ask DoorDash is designed for the moments when you don’t.”

Food delivery apps and tech giants are betting that AI can help make shopping more conversational and personalized, as companies race to make AI assistants a standard part of everyday life. In February, Uber Easts launched an AI-powered “Cart Assistant,” while Instacart has rolled out an AI shopping assistant that grocers can offer to their customers.

DoorDash’s app can build your grocery cart based on a photo from a cookbook, a picture of your grocery list, or a recipe. DoorDash will then add all the items and their correct quantities to your cart. It will prompt users to check if they already have staples like sugar and butter, so they don’t buy something they already have.

You can also ask the chatbot to reorder your last grocery cart or suggest new items based on your previous orders, DoorDash says.

As for ordering food, you can tell the chatbot that you want a “filling dinner for a family of 4.” The app will then surface restaurants alongside a personalized blurb explaining why it matches your search. You can narrow the results even further with a query like, “Show me kid-friendly vegetarian spots with mild options.”

Once you select a place, you can ask DoorDash to build a cart with suggestions based on your dietary preferences, budget, group size, or past orders.

With Ask DoorDash for Reservations, users can ask the chatbot to find a “table for two downtown for a date-night dinner around 8 PM.” The app will then surface restaurants with availability. You can refine the results further by asking for something a little more intimate.

The chatbot is rolling out on iOS in select regions for restaurant search and grocery shopping, and within DoorDash Reservations. It will reach more users across the U.S. in the coming weeks, the company says.

Instagram has resolved a security issue that allowed several users’ accounts to get hacked. The attack appeared to rely on tricking Meta’s own AI-powered support chatbot into granting access to a victim’s account.

Over the weekend, several users on Reddit claimed that their Instagram accounts had been compromised, and a number of users on X warned of similar account hijackings. The compromised accounts include the Instagram handle for the Obama-era White House, which appears to have been inactive since 2017; and the account of the U.S. Space Force’s chief master sergeant John Bentivegna.

Security researcher Jane Wong said her Instagram account was also taken over. 

“The password got changed without my knowledge and I was getting different password reset attempts throughout yesterday,” said Wong. “Quite concerning.” 

A video posted on X showed the step-by-step process to hack someone’s Instagram account. The hacker allegedly used a VPN to spoof the targets’ presumed location to avoid triggering Instagram’s automated account protections. Then, the hacker opened a chat with Meta AI Support Assistant and asked the bot to add a new email address to the target’s account. The chatbot can be seen sending a verification code to the email address provided by the hacker; the hacker then shares the verification code with the chatbot, which prompts the chatbot to show a button to “Reset Password.” The hacker enters a new password and takes over the victim’s account. 

TechCrunch was able to verify that the hacker’s public email mailbox, which was displayed in the video, effectively received the verification code. 

The attack relied on the fact that at no point the hacker had to take over the legitimate email address linked to the victims’ Instagram account. 

On Monday, Instagram spokesperson Andy Stone said in a reply to Wong’s post and others that the issue was now fixed. It’s unclear how many Instagram users had their accounts improperly accessed.

Meta did not immediately respond to TechCrunch’s request for comment.

Hackers hijacked Instagram accounts over the weekend by tricking Meta’s own AI-powered support chatbot into granting them access. The attack required no access to the victim’s email, no phishing link, and no malware. The hacker simply asked the chatbot to add a new email address to someone else’s account.

A video posted on X showed the step-by-step process. The hacker used a VPN to spoof the target’s presumed location, avoiding Instagram’s automated account protections. They then opened a chat with Meta AI Support Assistant and asked the bot to add a new email address to the target’s account.

The chatbot sent a verification code to the hacker’s email address. The hacker shared the code back with the chatbot. The bot then displayed a “Reset Password” button. The hacker entered a new password and took over the account.

At no point did the hacker need to access the legitimate email address linked to the victim’s Instagram account. TechCrunch verified that the hacker’s public email mailbox, displayed in the video, received the verification code. The attack exploited a fundamental flaw: the AI chatbot treated the person it was talking to as the account owner without verifying their identity.

The compromised accounts included the Obama-era White House Instagram handle, which had been inactive since 2017, and the account of US Space Force Chief Master Sergeant John Bentivegna. Security researcher Jane Wong said her account was also taken over.

“The password got changed without my knowledge and I was getting different password reset attempts throughout yesterday,” Wong said. “Quite concerning.” Multiple users on Reddit and X reported similar hijackings over the same weekend.

Instagram spokesperson Andy Stone said on Monday that the issue was fixed. It is unclear how many accounts were compromised. Meta did not respond to TechCrunch’s request for comment.

The attack is a textbook example of why deploying AI chatbots with account-level permissions is dangerous. Salesforce’s Agentforce customers have been reluctant to let AI agents take financially meaningful actions precisely because of this risk. Analyst Rebecca Wettemann described the fear as “the AI running off in the middle of the night and refunding a bunch of transactions.” Meta gave its AI the ability to reset passwords, and the AI did exactly what it was asked to do, for the wrong person.

The AI agent security landscape is producing new categories of vulnerability faster than companies can address them. OpenClaw’s Claw Chain exploit weaponised an agent’s own sandbox privileges. This Instagram attack weaponised an AI support bot’s account management privileges. The common thread: when an AI agent has the authority to act, the security of the system depends entirely on whether the agent can verify who is asking it to act.

The Meta AI Support Assistant was designed to reduce the cost of human customer service. It succeeded at that. It also created an attack surface that human support agents would not have: a human agent would have verified the caller’s identity before adding a new email to an account. The chatbot did not.

This is the third high-profile AI deployment failure in a single week. Starbucks scrapped its AI inventory system after nine months of miscounts. Waymo’s flood recall failed within two weeks. Meta’s AI chatbot gave hackers the keys to Instagram accounts. The pattern is consistent: AI systems deployed at scale fail in ways their designers did not anticipate, and the failures are more consequential than the efficiencies they were built to deliver.