According to a report by Cisco Talos published on August 4, 2026, Russian-speaking threat actors have been using Cursor AI to build malware, automate attacks, and identify vulnerabilities in target systems since at least 2025. These activities exploit the AI coding platform not through a technical flaw, but by using its features as designed: writing code faster and more efficiently. Claude Code and Codex are also used in these campaigns. SpaceX completed its $60B acquisition of Anysphere, Cursor’s parent company, on August 14, 2026, approximately ten days after Cisco Talos published its findings.
Source: Read the original article
