July 2, 2026
- Palo Alto Unit 42 documented "Phantom Squatting": attackers systematically probe LLMs to identify which non-existent domains models most often hallucinate for target brands ("adversarial hallucination probing"), then pre-register the highest-value ones and stand up phishing/malware within hours. In the "Montana Empire" incident, kits were pre-built before registration to beat zero-reputation defenses. Unit 42, Dark Reading. · AI & Model Security
in Scattered Spider Suspect Grabbed at Helsinki Airport, Extradited to the US