Threat Intelligence2 articles

Threat Intelligence

Articles

Aurora Ransomware Deployed Cursor AI Coding Agent for Autonomous Network Exploitation
A threat intelligence report from Gambit Security has revealed that the Russian-speaking ransomware operation known as Aur0ra (Aurora) utilized the Cursor AI coding assistant to conduct hands-on network intrusions and automated exploitation across at least seven enterprise environments between April and May 2026. According to session logs recovered from exposed threat actor infrastructure, the attacker drove Cursor Agent configured with the claude-4.5-sonnet-thinking model identifier to execute
August 27, 20261 min
OpenAI Disrupts Russia-Linked Influence Network Using ChatGPT
OpenAI has banned a network of ChatGPT accounts originating in Russia that were used to operate a covert influence campaign centered on a fabricated think tank known as the International Burke Institute (IBI). According to a threat intelligence report published by OpenAI on August 25, 2026, the operation used ChatGPT to generate English-language social media content across platforms including X, LinkedIn, Facebook, Substack, and Telegram. The operators prompted the models in Russian while expli
August 25, 20261 min