AI Tool Hallucinations: A New Threat to Cybersecurity

HalluSquatting is a real attack class — and the defense is mostly boring, which is the good news

A research team from Tel Aviv University and Technion published a new class of prompt-injection attack on Wednesday that deserves a careful read, not a panic. The technique, which they've named HalluSquatting, doesn't exploit a bug in any single AI coding tool. It exploits the fact that large language models routinely invent the names of packages, repositories, and skill files — and that those inventions are predictable enough to register in advance.

The numbers are sharp. Across six major LLMs, hallucination rates for recently published repositories hit 92.4%.

---

This is an excerpt. Read the full post at otf-kit.dev/blog/ai-tool-hallucination-threat — full-stack kits your AI coding agent can actually ship to production. Browse the kits →