Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets
Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets
31 August 2026
Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX's artificial intelligence (AI)-powered coding assistant Cursor to break into target networks, according to findings from CloudSEK and Gambit Security.
The two independent analyses are based on exposed infrastructure associated with the Russian-speaking cybercrime group, leading to the discovery of its