Researchers identify 'HalluSquatting' attack targeting AI coding assistants
Story essentials
Aya Spira, Elad Feldman, Avishai Wool, Ben Nassi, Stav Cohen, Ron Bitton
Global
2026-07-08
This page is produced by collecting and structuring multiple public reports. Sections based only on reporting or testimony affect the displayed assessment, and the page is updated when new information is identified.
About this article
COMPAMIR Editorial Team
The COMPAMIR editorial team brings together public reporting and links to the original coverage. We update the page as new information emerges.
Read our editorial policy- Earlier version 17/8/2026, 2:21:15 PM
Researchers discovered a new prompt-injection attack called 'HalluSquatting'. The attack exploits LLMs' tendency to hallucinate resource identifiers. It targets coding assistants like GitHub Copilot and Cursor to install malicious reverse shells.
Read next
Prioritized by shared people, places, and events.
Apple reduces staff in Siri and Vision Pro divisions
Apple has cut more than 200 jobs within its Siri and Vision Pro teams. The cuts involve the Vision Pro gaming team and the immersive content team. The company is restructuring to evolve its business strategy.