Cursor AI Hacking Raises Security Concerns After SpaceX Acquisition

Cursor AI hacking has gained attention as a cybersecurity issue after it was revealed that Russian-speaking hackers had employed Cursor, an AI-enabled coding software platform, to build malware, discover software vulnerabilities, and automate some of their attack activities. This was based on a report published by Reuters after analyzing cybersecurity research data and a report from Gambit Security.

The above scenario depicts the potential risks posed by coding AI tools to the security of cyberattacks. Instead of exploiting the Cursor platform, the hackers have been using it as a coding assistant to develop malware.

Also Read | NVIDIA Revenue Surges as AI Demand Powers Record Quarterly Growth

Cursor AI Hacking Activity Targets Cybersecurity Weaknesses

The analysis of exposed logs of AI prompts by Cisco Talos revealed that there are multiple threat actors that use the AI coding assistant known as Cursor in tandem with others like Claude Code and Codex.

These prompts were used to create malicious code, hunt for vulnerabilities in software, and automate various processes during attacks. It is reported that Russian-speaking people have been involved in such activities since 2025.

AI code assistants could assist attackers in developing malware, testing out methods, and automating their credential harvesting attacks. This technique could also minimize the amount of effort needed to exploit vulnerabilities in the systems being targeted.

It should be noted that this Cursor AI hacking does not involve discovering a fundamental vulnerability in Cursor. Rather, it involves using the system like developers.

Cursor Security Issues Add to the Concern

Cursor also had other security reports that go beyond the abuse of the AI system by cybercriminals.

The threats include risks related to credential theft resulting from configuration flaws and automatic execution problems targeting Windows users. There are also third-party add-ons that pose extra threats if they are not scrutinized before installation.

The above threats are not attributed to any state-sponsored groups. They are different security threats from the Cursor AI hacking report by the researchers.

SpaceX Acquisition Brings More Attention to Cursor

The discovery received even more recognition since SpaceX concluded its alleged $60 billion takeover of Anysphere, the parent company of Cursor, on about August 14.

Talos from Cisco released its discoveries on August 4, just a few days prior to the completion of the acquisition. This has drawn more attention to the issue of how the AI coding platform might be utilized by cybercriminals.

But there is no confirmed information on the direct involvement of Cursor in any breach of seven companies. The actual evidence indicates Cursor AI hacking and the malicious use of AI coding software by cybercriminals.

These incidents draw attention to the rising issue in cybersecurity. As AI coding software is becoming more advanced, hackers can utilize it for code creation, finding security weaknesses, and performing activities that used to take much more time.

In terms of cybersecurity professionals, the increase in cases of Cursor AI hacking indicates that monitoring the usage of AI development software may become a crucial component of cyberattack defense.

Also Read | StarkWare Completes First Quantum-Resistant Bitcoin Transaction