Skip to Content
logologo
AI Incident Database
Faire un don
Découvrir
Envoyer
  • Bienvenue sur AIID
  • Vue de tableau
  • Vue de liste
  • Entités
  • Taxonomies
  • Vue spatiale
  • Blog
  • Résumé de l’Actualité sur l’IA
  • Incident au hasard
  • S'inscrire
Découvrir
Envoyer
  • Bienvenue sur AIID
  • Vue de tableau
  • Vue de liste
  • Entités
  • Taxonomies
  • Vue spatiale
  • Blog
  • Résumé de l’Actualité sur l’IA
  • Incident au hasard
  • S'inscrire
Entités

Helideck Certification Agency

Affecté par des incidents

Incident 16613 Rapports
Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

2026-04-08

Between April 8 and May 21, 2026, a Russian-speaking operator linked to the Aurora ransomware group reportedly used Cursor Agent, running Anthropic's Claude Sonnet 4.5, to assist exploitation across multiple organizations. Researchers said some AI-directed tasks succeeded while others failed; independent reporting identified six affected companies but could not determine how much the AI facilitated each breach or whether all led to data theft or extortion.

Plus

Entités liées
Autres entités liées au même incident. Par exemple, si le développeur d'un incident est cette entité mais que le responsable de la mise en œuvre est une autre entité, ils sont marqués comme entités liées.
 

Entity

Aurora ransomware affiliate

Incidents involved as Deployer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Cybercriminals

Incidents involved as Deployer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Ransomware operators

Incidents involved as Deployer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Agentic threat actors

Incidents involved as Deployer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

AI agent system deployers

Incidents involved as Deployer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Anysphere

Incidents involved as Developer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Anthropic

Incidents involved as Developer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

AI agent system developers

Incidents involved as Developer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Large language model developers

Incidents involved as Developer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Christeyns

Affecté par des incidents
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Teckentrup

Affecté par des incidents
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Bayou Title

Affecté par des incidents
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Companies

Affecté par des incidents
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Organizations

Affecté par des incidents
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Cursor

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Claude Sonnet 4.5

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Claude

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

AI agent systems

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Claude AI models

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Large language models

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

LLM-integrated code assistant

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Aurora ransomware

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Ransomware

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus

Recherche

  • Définition d'un « incident d'IA »
  • Définir une « réponse aux incidents d'IA »
  • Feuille de route de la base de données
  • Travaux connexes
  • Télécharger la base de données complète

Projet et communauté

  • À propos de
  • Contacter et suivre
  • Applications et résumés
  • Guide de l'éditeur

Incidents

  • Tous les incidents sous forme de liste
  • Incidents signalés
  • File d'attente de soumission
  • Affichage des classifications
  • Taxonomies

2026 - AI Incident Database

  • Conditions d'utilisation
  • Politique de confidentialité
  • dd3f754