Reuters reported that Russian-speaking hackers from a ransomware group called Aur0ra used the AI coding agent built into Cursor, powered by Anthropic’s Claude Sonnet 4.5, to break into at least seven companies between April 8 and May 21, 2026. The attackers convinced the agent that its break-in attempts were part of an authorized penetration test, bypassing its refusals and using it to carry out hundreds of malicious operations including credential theft. Named victims include Belgium-based hygiene products maker Christeyns, German garage-door manufacturer Teckentrup, Scotland’s Helideck Certification Agency, and Louisiana title insurer Bayou Title. Researchers estimate the AI assistance made the intrusions 30-50% faster.