Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations
Aurora ransomware operators are using SpaceX-owned Cursor's AI agent to perform reconnaissance and exploitation tasks during intrusions.
55
Product
Cursor Agent
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 17, 2026
- Last mentionedAug 28, 2026
Timeline
2 articles · newest firstHazmat: Open-source containment for AI agents
Open-source tool Hazmat runs AI coding agents like Claude Code and Codex in a dedicated account, restricting access to credentials and files.
22
Appears with
- Claude Codeproduct · 1
- Aurorathreat actor · 1
- Cursorvendor · 1
- OpenAI Codexproduct · 1
- Hazmatvendor · 1
- SpaceXorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.