- Researchers found unclaimed llms.txt references on 120 domains, exploitable by cybercriminals
- AI agents could install malware if they execute hallucinated or outdated documentation commands
- Fixes: clean documentation and restrict AI agents from treating docs as executable instructions
Cybercriminals are able to now abuse hallucinated, outdated, and outright incorrect website documentation to deliver malware to unsuspecting victims through AI agents, new research has claimed.