LLM09:2025Sources
← Back to lesson
Sources & Attribution
Everything in this lesson, sourced.
Every incident, ruling, and research paper mentioned in LLM09:2025 — Misinformation — traced back to where it came from.
Framework License

This lesson is built on the OWASP Top 10 for Large Language Model Applications (2025), released under Creative Commons Attribution-ShareAlike 4.0. Definitions, vulnerability categories, mitigation structure, and attack scenarios are drawn directly from this framework. Real-world incidents and research are independent factual reporting, cited individually below.

01
Primary Framework
The structure this entire lesson is built on
OWASP Top 10 for LLM Applications 2025 — LLM09: Misinformation
OWASP Foundation · Released 2025 · CC BY-SA 4.0
Cited for: Core definition, vulnerability categories, 6 mitigation categories, official attack scenarios. Basis for all 5 parts of this lesson.
genai.owasp.org →
02
Court Rulings & Legal Incidents
Documented legal proceedings referenced in this lesson
Mata v. Avianca — Sanctions OrderCourt Order
Judge P. Kevin Castel · U.S. District Court, S.D.N.Y. · June 22, 2023
Cited for: Fabricated citations, overreliance loop, slides 1, 10, 14, 20, 22, 25, 27
CourtListener docket →
Moffatt v. Air Canada — Tribunal DecisionTribunal Ruling
BC Civil Resolution Tribunal · February 14, 2024 · Case No. SC-2023-007025
Cited for: Professional domain misinformation, company liability for LLM output, slides 12, 16, 19, 21, 24, 25, 27
CRT decision →
03
Academic Research
Peer-reviewed and preprint research cited in this lesson
Asleep at the Keyboard? Assessing the Security of GitHub Copilot’s Code ContributionsResearch Paper
Pearce et al. (NYU) · arXiv:2108.09293 · Published IEEE Symposium on Security and Privacy 2022
Cited for: Hallucinated/insecure code, 40% vulnerability rate, slides 5, 13, 18, 25, 27
arXiv:2108.09293 →
Slopsquatting: LLM Package Hallucination as a Supply-Chain Attack VectorResearch Finding
Bar Lanyado · Vulcan Cyber · Published 2024
Cited for: Package hallucination, slopsquatting attack path, slides 5, 11, 15, 18, 23, 25, 27
Vulcan Cyber blog →
Built on the OWASP LLM Top 10:2025 framework under CC BY-SA 4.0.
Found an error or outdated link? Let us know.