THREATOPS
THREAT OPSThreat News › Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

lowthehackernewsPublished 2026-08-31

Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX's artificial intelligence (AI)-powered coding assistant Cursor to break into target networks, according to findings from CloudSEK and Gambit Security.

The two independent analyses are based on exposed infrastructure associated with the Russian-speaking cybercrime group, leading to the discovery of its

MITRE ATT&CK techniques

Original source: https://thehackernews.com/2026/08/aurora-ransomware-operators-use-cursor.html