Cursor AI Exploited by Russian Hackers in High-Profile Cyberattacks

Russian-speaking hackers have been exploiting Cursor AI to build malware, automate attacks, and probe for vulnerabilities, according to Cisco Talos.

The report, published on August 4, 2026, analyzed exposed AI prompt logs from compromised systems and found that various threat actors, including Russian-speaking groups, had been using Cursor to generate malicious code and identify software vulnerabilities.

Cursor's acquisition by SpaceX for $60B just days later has raised questions about the company's security measures and its ability to prevent misuse. The report notes that none of the vulnerabilities identified have been attributed to state-sponsored actors.