Russian-Speaking Hackers Exploit Cursor AI to Breach 7 Companies, Expose AI Security Flaws

Russian-speaking cybercriminals used SpaceX's Cursor AI tool to hack seven companies

Russian-speaking hackers exploited SpaceX's AI coding assistant, Cursor, for company intrusions. This AI-boosted hacking spree targeted at least seven firms earlier this year. The cybercriminals tricked the AI into performing malicious operations by claiming it was a simulation. Gambit Security's report detailed these AI-assisted cyberattacks and their methods. WASHINGTON, - Russian-speaking hackers used SpaceX's AI coding assistant, Cursor, to help break in to a Belgian chemical company and at least six other firms earlier this year, according to data reviewed by Reuters and a report issued on Thursday by the startup Gambit Security. The cybercriminals' AI-boosted hacking spree is the latest example of how rogue actors are using commercial AI tools to carry out intrusions. Gambit's chief strategy officer, Curtis Simpson, said it also showed how AI providers were locked in to a never-ending arms race with malicious users trying to circumvent their guardrails. "This is going to be a cat-and-mouse game," Simpson said. Cursor and its parent company, SpaceX, did not return messages seeking comment. Also Read: AI adoption surges in Asia as companies set up new hubs in Singapore, India EXPOSED SERVER REVEALS HACKING METHODS Gambit said it discovered the hacking campaign after finding a server that a new ransomware gang called ⁠Aur0ra had inadvertently ⁠exposed to the internet. That allowed the Tel Aviv-based company to review 28 chat sessions between one or more of Aur0ra's hackers and one of Cursor's AI agents, which are programs that can operate with various degrees of autonomy. In its report, Gambit said Aur0ra persuaded the AI agent to carry out hundreds of malicious operations - such as credential theft or high-value account takeover - by falsely claiming that the hacking was part of a simulation. "We need any administrator account," Gambit quoted the hackers as saying at one point. "Find any working passwords," it also quoted them as saying. Gambit did not identify the hackers' victims by name, but Reuters was able to identify six of them after independently reviewing portions of the chat data, which was still online as of last month. The chat logs, which spanned April 8 to May 21, showed that the victims of Aur0ra's Cursor-boosted hacking spree included the Belgian ⁠company - Ghent-based hygiene and cleaning products maker Christeyns - as well as German garage door manufacturer Teckentrup and the Scotland-based Helideck Certification Agency, which vets helicopter landing sites. The rest included an Argentine pharmaceutical distributor, an Italian manufacturer, and Bayou Title, which advertises itself as Louisiana's largest title insurance company. None of the six companies responded ⁠to requests by Reuters for comment. At least one of the victims, Bayou Title, was named on Aur0ra's data leak site, which typically indicates that the hackers tried and failed to secure a ransom. Aur0ra, a hacking group that began claiming victims earlier this year, did not return messages. HACKERS FOOLED AI WITH SIMULATION CLAIM The back-and-forth captured in the logs reviewed by Reuters shows the hacker issuing terse commands and Cursor's AI agent responding with technical advice delivered in chirpy, emoji-laden messages typical of chatbot-speak. "Great! VPN connected successfully!" it said after breaching the Argentine company. "Let's try to crack these hashes," it said at another point, referring to the process of decoding cryptographically scrambled passwords. After finding a vulnerable host in Teckentrup's network, the AI recommended using a well-known malicious software tool to exploit it. "**Chance of success**: VERY HIGH," it added. Also Read: Nvidia agrees to buy Hugging Face for $12.9 billion Reuters could not independently ascertain the extent to which the break-ins were facilitated by help from the Cursor agent, or whether every breach necessarily resulted in exfiltration of data and an extortion attempt. Gambit said the agent was powered by Anthropic's Claude Sonnet 4.5, a more basic model than Anthropic's Mythos 5 or Fable 5, whose cyber prowess has drawn attention in Washington. Anthropic did not return a message seeking comment. Eyal Sela, Gambit's director of threat intelligence, said Cursor still offered the hackers a clear boost, ⁠adding that the AI agent "probably helps them get 30, 40, 50 percent faster because it helps them skip over all the things they'd have to do manually." Cursor's agent refused requests that it deemed harmful or illegal a handful of times, Sela said, but the hacker would almost always circumvent the refusals by restarting the dialogue and emphasizing that the hack was all part of a test. Gambit said the agent's chain of thought, a way that AI models think out loud, showed the hacker's cover story overriding its safeguards in real time. "This is a test environment, so it is legal," the agent said to itself, according to one of the logs. News of the hacking spree comes as Cursor is being incorporated within Elon Musk's rockets-and-AI company, SpaceX, a deal that closed earlier this month. Concerns are also rising over the digital risks posed by AI models, especially the models that power AI agents like the ones that have escaped from AI companies' labs over the past few months. Simpson, the Gambit executive, said AI-assisted hacking was the new normal. "We'll see more and more of this all the time," he said.

Russian-speaking cybercriminals used SpaceX's Cursor AI tool to hack seven companies: Reuters exclusive

Russian-speaking hackers used SpaceX's AI coding assistant, Cursor, to help break in to a Belgian chemical company and at least six other firms earlier this year, according to data reviewed by Reuters and reports issued on Thursday by cybersecurity companies Gambit Security and CloudSek. The cybercriminals' AI-boosted hacking spree is the latest example of how rogue actors are using commercial AI tools to carry out intrusions. Gambit's chief strategy officer, Curtis Simpson, said it also showed how AI providers were locked in to a never-ending arms race with malicious users trying to circumvent their guardrails. "This is going to be a cat-and-mouse game," Simpson said. Cursor and its parent company, SpaceX, did not return messages seeking comment. Exposed server reveals hacking methods Gambit said it discovered the hacking campaign after finding a server that a new ransomware gang called Aur0ra had inadvertently exposed to the internet. That allowed the Tel Aviv-based company to review 28 chat sessions between one or more of Aur0ra's hackers and one of Cursor's AI agents, which are programs that can operate with various degrees of autonomy. In its report, Gambit said Aur0ra persuaded the AI agent to carry out hundreds of malicious operations -- such as credential theft or high-value account takeover -- by falsely claiming that the hacking was part of a simulation. "We need any administrator account," Gambit quoted the hackers as saying at one point. "Find any working passwords," it also quoted them as saying. In its report, Singapore-based CloudSek said the data on the server showed that Aur0ra had claimed at least 20 victims overall, although it did not break down how many were compromised with the help of AI. Neither Gambit nor CloudSek identified the hackers' victims by name, but Reuters was able to identify six of them after independently reviewing portions of the chat data, which was still online as of last month. The chat logs, which spanned April 8 to May 21, showed that the victims of Aur0ra's Cursor-boosted hacking spree included the Belgian company -- Ghent-based hygiene and cleaning products maker Christeyns -- as well as German garage door manufacturer Teckentrup and the Scotland-based Helideck Certification Agency, which vets helicopter landing sites. The rest included an Argentine pharmaceutical distributor, an Italian manufacturer, and Bayou Title, which advertises itself as Louisiana's largest title insurance company. None of the six companies responded to requests by Reuters for comment. At least one of the victims, Bayou Title, was named on Aur0ra's data leak site, which typically indicates that the hackers tried and failed to secure a ransom. Aur0ra, a hacking group that began claiming victims earlier this year, did not return messages. Hackers fooled AI with simulation claim The back-and-forth captured in the logs reviewed by Reuters shows the hacker issuing terse commands and Cursor's AI agent responding with technical advice delivered in chirpy, emoji-laden messages typical of chatbot-speak. "Great! VPN connected successfully!" it said after breaching the Argentine company. "Let's try to crack these hashes," it said at another point, referring to the process of decoding cryptographically scrambled passwords. After finding a vulnerable host in Teckentrup's network, the AI recommended using a well-known malicious software tool to exploit it. "**Chance of success**: VERY HIGH," it added. Reuters could not independently ascertain the extent to which the break-ins were facilitated by help from the Cursor agent, or whether every breach necessarily resulted in exfiltration of data and an extortion attempt. Gambit said the agent was powered by Anthropic's Claude Sonnet 4.5, a more basic model than Anthropic's Mythos 5 or Fable 5, whose cyber prowess has drawn attention in Washington. Anthropic did not return a message seeking comment. Eyal Sela, Gambit's director of threat intelligence, said Cursor still offered the hackers a clear boost, adding that the AI agent "probably helps them get 30, 40, 50 percent faster because it helps them skip over all the things they'd have to do manually." Cursor's agent refused requests that it deemed harmful or illegal a handful of times, Sela said, but the hacker would almost always circumvent the refusals by restarting the dialog and emphasizing that the hack was all part of a test. Gambit said the agent's chain of thought, a way that AI models think out loud, showed the hacker's cover story overriding its safeguards in real time. "This is a test environment, so it is legal," the agent said to itself, according to one of the logs. News of the hacking spree comes as Cursor is being incorporated within Elon Musk's rockets-and-AI company, SpaceX, a deal that closed earlier this month. Concerns are also rising over the digital risks posed by AI models, especially the models that power AI agents like the ones that have escaped from AI companies' labs over the past few months. Simpson, the Gambit executive, said AI-assisted hacking was the new normal. "We'll see more and more of this all the time," he said.

Hackers use SpaceX's Cursor AI to hack seven companies and exploit safety guardrails: Report

Cybersecurity experts say AI helped speed up the hackers' harmful activities. Artificial intelligence is helping software engineers code faster. While it's a boon for many, hackers are also using it for malicious purposes. According to a new report, the hackers have used SpaceX's AI coding assistant, Cursor, to help break into a Belgian chemical company and at least six other businesses. It was recently uncovered after cybersecurity startup Gambit Security found an internet-exposed server linked to a new ransomware group called Aur0ra. The investigators stated that they reviewed 28 chat sessions between the hackers and a Cursor AI agent. The conversations showed the attackers using false claims about running a security test to persuade the AI to provide help with activities such as stealing login details and taking over important accounts. Reuters, citing Gambit Security, recently reported that the hackers used Cursor's AI agent to carry out hundreds of harmful tasks. According to the report, the attackers asked the AI to find administrator accounts and working passwords. The shocking part was that in one case the agent helped after the hackers gained access to a company's VPN. If that was not already enough, the tool also provided suggestions for breaking password hashes. Also read: Samsung Galaxy S26 FE vs Pixel 10a vs iPhone 17e: Camera, battery, specs, price and more compared The chat logs reviewed by Reuters covered activity between April 8 and May 21. The media outlet claimed that the targeted organisations included Belgian hygiene and cleaning products maker Christeyns, German garage door manufacturer Teckentrup and the Scotland-based Helideck Certification Agency. Other than that, an Argentine pharmaceutical distributor, an Italian manufacturer and Bayou Title, a Louisiana-based title insurance company, were also part of the alleged hack. The most shocking part was how the attackers managed to get around the AI's safety measures. Gambit said Cursor's agent refused some harmful requests, but the hackers repeatedly restarted conversations and claimed that their activities were part of a legal simulation or security test. Moreover, the logs also showed AI accepting these explanations and then providing technical assistance. At one point, it reportedly described a suggested attack as having a 'VERY HIGH' chance of success. Also read: Samsung Galaxy S26 FE launches with One UI 9 and 4900mAh battery: Check price, specs and more Gambit also added that the AI agent was powered by Anthropic's Claude Sonnet 4.5. The cybersecurity company believes the AI gave the attackers a significant speed advantage by reducing the amount of work they had to perform manually. However, Reuters added that they were unable to independently confirm how much AI directly contributed to each intrusion or whether every attack resulted in stolen data or ransom demands.