HalluSquatting: The New Cyberattack Exploiting AI Hallucinations
A team of researchers has discovered a new vulnerability in artificial intelligence systems: the HalluSquatting attack, which exploits the tendency of language models to hallucinate code repository names. Attackers can create malicious repositories with those names and trick AI agents into executing dangerous code. The study reveals success rates of up to 85% in individual models and 20-35% in commercial applications like Cursor or Copilot.



