MeetingTV Sues Palo Alto Networks Over Allegedly AI-Hallucinated Threat Report

Summary

MeetingTV has sued Palo Alto Networks, Koi Security, and researchers involved in a threat-intelligence report that allegedly linked the video-conferencing and webinar company to a Chinese corporate-espionage operation. The complaint says Koi’s proprietary Wings platform relied unsupervised on an LLM, which allegedly hallucinated findings connecting MeetingTV’s Zoomcorder service to a campaign attributed to the Chinese actor DarkSpectre. Koi’s December 30 blog reportedly described Zoomcorder as a public-facing front and monetization channel for the operation, and claimed the campaign stole corporate meeting intelligence from 2.2 million users. MeetingTV disputes those claims and says security companies and service providers around the world blocked its domains and services as malware or command-and-control infrastructure after the report appeared. Founder Michael Robertson says Koi did not contact the company before or after publication, and that he learned of the report only while asking providers to remove the blocks. The lawsuit also challenges a supposed “Twitter X Video Downloader” browser extension that Koi used as a technical link between the campaign and DarkSpectre; MeetingTV says the extension does not exist and that Koi refused to provide information about it. Koi’s blog was later silently edited to remove references to Zoomcorder. Palo Alto Networks, which completed its acquisition of Koi in April, acknowledged the lawsuit and said the research reflected Koi’s effort to identify threats, while declining to address the specific allegations. MeetingTV is seeking evidence and a retraction, and says Palo Alto Networks continues to block some of its infrastructure. Robertson presents the dispute as a warning that AI-assisted security analysis requires human review, disclosure of accusations, an opportunity to respond, and a neutral process before consequential claims are published or acted upon.