CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 5394

As cited

Copy frozen at (site build).

ransomware

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Threat actors behind Aurora ransomware have leveraged Cursor, an artificial intelligence (AI)-powered coding assistant, to compromise target networks, according to research from CloudSEK and Gambit Security. The findings stem from analysis of infrastructure tied to a Russian-speaking cybercrime group. The attack campaign has affected at least 10 targets.

Why it matters: Organizations and security teams need to monitor for abuse of AI coding tools in hands of threat actors, as these capabilities can accelerate network compromise and development of attack tools.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary