A Russian-speaking ransomware gang called Aur0ra exploited SpaceX's Cursor AI coding assistant to breach at least seven companies between mid-April and late May, according to security firm Gambit Security.
Cursor, an AI-powered code editor, was used by the attackers to identify vulnerabilities and develop exploit code targeting victim networks. The campaign affected organizations across multiple sectors, including a Belgian chemical company among the confirmed targets.
The breach highlights growing concerns about the dual-use potential of AI development tools. While Cursor is designed to streamline legitimate coding work, the case demonstrates how such assistants can be repurposed for malicious activities when access controls are insufficient.
Gambit Security did not disclose the identities of all affected companies or specific financial damages. The incident occurred during a period when AI-assisted attacks have become increasingly sophisticated, with threat actors leveraging machine learning capabilities to automate portions of their hacking workflows.
SpaceX has not yet publicly commented on the security implications or whether Cursor's terms of service will be updated to prevent similar misuse.
Google is rolling out Encrypted Client Hello (ECH) support in Android 17 to prevent network monitoring of user browsing activity. The privacy feature strengthens connection security across cellular and home networks.
A new survey shows more Americans oppose police use of license plate readers than support them. The finding reflects growing concerns about surveillance overreach.
The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has confirmed a "major incident" involving a compromised system following claims by the Qilin ransomware group.
Claude, Codex, and Hermes generated 227 install commands referencing code with no identifiable owners, according to analysis of corporate documentation. The discovery raises security concerns about AI-generated dependencies.