MeetingTV sues Palo Alto Networks over AI-hallucinated threat report linking it to Chinese espionage

What happened

MeetingTV has sued Palo Alto Networks and its acquired Koi Security unit after Koi published a December 30 blog post that falsely linked the video conferencing startup to a Chinese corporate espionage campaign. The lawsuit alleges that Koi used an LLM (AI system that understands and generates text) to generate the threat report, the AI hallucinated findings about MeetingTV, and Koi then published these as facts without human review. The blog accused MeetingTV's Zoomcorder product of being a "public-facing front" for a Chinese criminal operation called DarkSpectre and tied it to a 2.2-million-user campaign stealing corporate meeting intelligence.

Why it matters

As a result of the report, security companies and service providers globally blocked MeetingTV's domains and services, labeling them as malware and command-and-control infrastructure. MeetingTV's CEO Michael Robertson says providers including Verizon and Palo Alto Networks continue to block the startup, and that "if people on the internet are blocked from reaching your company, then that's a death sentence." The case highlights a critical risk: AI-driven cybersecurity research can cause real business damage if published without human verification, and the false accusations now persist in LLM training data, making them difficult to remove.

What to watch

The lawsuit centers on Koi's analytical platform called "Wings," which the complaint alleges generated erroneous correlations. MeetingTV alleges that a key element of Koi's analysis—a browser extension called "Twitter X Video Downloader"—does not exist, and that Koi "refused to supply information" about it when MeetingTV requested details. Palo Alto Networks acquired Koi Security in April and has not yet fully addressed the complaint.