> TritonInfoSec News
Home / Sep 01, 2026 / Story
0
#8 The Hacker News general August 31, 2026 at 11:47 UTC

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

By [email protected] (The Hacker News)

AI Summary

CloudSEK and Gambit Security independently identified Russian-speaking Aurora (aka Aur0ra) ransomware operators using SpaceX's Cursor AI coding assistant to facilitate intrusions against at least 10 targets, discovered via exposed attacker infrastructure. This represents an early documented case of ransomware actors leveraging commercial AI coding tools operationally, with implications for how defenders model threat actor capabilities.

Read full article → https://thehackernews.com/2026/08/aurora-ransomwar…

Relevance score: 76.0/100

# More from September 01

  1. 1
    McKesson Confirms Data Breach as Attacker Deadline Looms SecurityWeek
  2. 2
    Berlin confirms data theft after Rhysida ransomware attack claims BleepingComputer
  3. 3
    China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs The Hacker News
  4. 4
    More Details Emerge on Exploited PaperCut Vulnerabilities SecurityWeek
  5. 5
    Microsoft warns of TerminalFix attacks deploying reverse tunnels BleepingComputer
  6. 6
    ServiceNow Patches 3 Critical Code Injection Vulnerabilities SecurityWeek
  7. 7
    ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions The Hacker News
  8. 9
    Critical Ruby on Rails Vulnerability in Attackers’ Crosshairs SecurityWeek
  9. 10
    DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims The Hacker News