Ransomware Operators Are Using AI Coding Agents Now

A ransomware crew used Cursor to write exploit code for ESXi hypervisors this month. Not a hypothetical. Not a tabletop exercise. The Aurora group integrated AI coding agents into active operations and hit production infrastructure with machine-generated payloads. That crossed a line most threat models hadn't drawn yet. The conventional assumption...