News · curated 7 Jul 2026

Startup sues Palo Alto Networks' Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionage

Coverage timeline

2 Jul 2026theregister.com

Single-source incident — first reported, latest, and curated coincide.

Why it matters

It highlights the real-world risk of relying on unsupervised LLM-generated threat intelligence, where hallucinated attributions can cause reputational and operational harm and erode trust in AI-assisted security research.

MeetingTV sued Palo Alto Networks and its acquired Koi Security, alleging Koi used an LLM (its 'Wings' platform) to generate a threat-intelligence report that hallucinated findings, falsely linking the startup to a Chinese espionage operation dubbed 'DarkSpectre.' The report reportedly led security vendors worldwide to block MeetingTV's domains as malware/C2 infrastructure.