Aurora ransomware

Aurora Ransomware Operators Reportedly Use Cursor AI in Targeted Attacks

Threat actors associated with the Aurora ransomware operation have been observed leveraging SpaceX's Cursor AI-powered coding assistant to facilitate intrusions into target networks. According to independent analyses from CloudSEK and Gambit Security, the actors utilized exposed infrastructure linked to the Russian-speaking cybercrime group to aid in their attacks. The report indicates that ten target networks may have been affected, though specific exploitation methods and the exact role of Cursor AI in the breaches remain under investigation.