Automating Theft: Hackers Use Cursor AI Coder for Massive Attacks on Business

Artificial intelligence has officially become a dual-use weapon in the hands of organized crime. On August 27, 2026, Reuters, citing an investigation by Gambit Security, reported that the Russian-speaking group `Aur0ra` successfully used the AI coder `Cursor` (now owned by SpaceX) to hack at least seven companies in Europe and the US.

Among the victims are Belgian chemists (Christeyns), German manufacturers (Teckentrup), and the American Bayou Title. Researchers analyzed 28 chats left by the attackers and came to a grim conclusion: using a commercial AI assistant accelerated the hackers' work by 30–50%. Vibe coding doesn't just work for good. Automating the writing of malicious scripts lowers the barrier to entry into cybercrime. For B2B corporations, this means that classic security operations centers (SOCs) will be swept away by a flood of synthetic code unless they deploy mirror AI for defense.

Source: Reuters / Gambit Security