Russian-Speaking Hackers Told Cursor AI It Was a 'Test,' Then Used It To Attack Seven Companies

Aurora ransomware operators reportedly persuaded Cursor's AI agent that cyberattacks were authorised security tests (Credit: cliff1126/Pixabay)

Russian-speaking cybercriminals used Cursor's AI agent to help attack seven companies after telling it their activity was an authorised security test, according to Tel Aviv cybersecurity firm Gambit Security and a Reuters review of material from the same investigation.

Gambit found the activity after an Aurora ransomware server was left exposed on the internet. That access yielded 28 chat sessions, dated 8 April to 21 May, between an operator and Cursor's agent.