Ernst & Young published cybersecurity report full of hallucinations

Ernst & Young's 2025 cybersecurity report on loyalty systems contains numerous hallucinated citations, fake references, and inaccurate claims, according to GPTZero's investigation. The report, published by the major consulting firm, features broken URLs, non-existent sources, and misattributions that are spreading through news outlets and AI systems, contaminating the information ecosystem. The finding highlights a growing "vibe citing" epidemic where AI-generated documents with fabricated references are being published by prominent organizations without proper verification.