SpaceX Cursor AI Used by Hackers in 7 Company Breaches

Russian-speaking cybercriminals used SpaceX’s AI coding assistant, Cursor, to hack a Belgian chemical company and at least six other firms. This information comes from data reviewed by Reuters and reports from cybersecurity companies Gambit Security and CloudSek. The hackers, part of a new ransomware gang called Aur0ra, used Cursor to carry out hundreds of malicious operations. They tricked the AI agent by falsely claiming their hacking was part of a simulation. Gambit discovered this campaign after finding an exposed server belonging to Aur0ra. The chat logs showed the hackers asking the AI for administrator accounts and working passwords. The victims of this AI-boosted hacking spree include Ghent-based Christeyns, German garage door manufacturer Teckentrup, and the Scotland-based Helideck Certification Agency. Other victims include an Argentine pharmaceutical distributor, an Italian manufacturer, and Bayou Title, a title insurance company. This incident highlights how malicious actors are using commercial AI tools to conduct intrusions, showing an ongoing "cat-and-mouse game" between AI providers and those trying to circumvent their safeguards.