Instagram bug opened a path for hackers to hijack app, turn smartphones into spies

The RCE vulnerability, now patched, took nothing more than an image file to trigger.