News

Startup sues Palo Alto Networks' Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionage

Page published

Coverage timeline

7 Jul 2026theregister.comobserved

Single-source incident — one report is available.

Why it matters

It highlights the real-world risk of relying on unsupervised LLM-generated threat intelligence, where hallucinated attributions can cause reputational and operational harm and erode trust in AI-assisted security research.

MeetingTV sued Palo Alto Networks and its acquired Koi Security, alleging Koi used an LLM (its 'Wings' platform) to generate a threat-intelligence report that hallucinated findings, falsely linking the startup to a Chinese espionage operation dubbed 'DarkSpectre.' The report reportedly led security vendors worldwide to block MeetingTV's domains as malware/C2 infrastructure.