Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets
Thionne_WTZ · x · 2026-09-01
Threat actors associated with Aurora ransomware were observed using SpaceX's AI-powered coding assistant Cursor to plan and execute attacks. The agent handled exploitation tasks including network scanning, privilege checks, NTLM relay attempts, and certificate attacks against 10 targets. The findings are based on exposed infrastructure leaking months of activity.
More from coding & agent
- Vibe-coded dashboard leaked franchise financials before anyone logged in — shauntrennery · 2026-10-16
- Fintech HR built a sourcing agent on 60,000 past applicants — 30 qualified candidates in a month — G0NZ0BOY · 2026-10-16
- Orchestrating a 100-image portrait of humanity for aliens with ChatGPT, Argon and p5.brush — dx8xb · 2026-10-16
- 3x DGX Spark cluster runs GLM-5.3-Flash locally behind a proxy, 1.75M tokens/day at 119W — Teknium · 2026-10-16
- Builder's one rule for trusted desktop agents: read freely, but sending, deleting, buying always ask first — No_Fan5310 · 2026-10-16
- GPT-built unifi-simulator makes MikroTik switches appear inside UniFi Network — Pytlicek · 2026-10-16