JQJO — Latest news · Page 416

Security researchers from CloudSEK and Gambit Security revealed that threat actors linked to the Aurora ransomware group abused the AI-powered coding assistant Cursor to execute real-world cyberattacks against ten corporate targets between April and May 2026. Investigators discovered an exposed open directory containing shell histories, toolkits, and chat transcripts showing human operators prompting Cursor running Anthropic's Claude Sonnet model in Russian. The AI agent planned and automated intrusion workflows, including network reconnaissance, subnet scanning via Nmap, BloodHound collection, proxychain configuration, and Active Directory exploitation planning. Following AI-assisted reconnaissance, the attackers moved laterally, disabled security controls, exfiltrated sensitive data, and deployed the Zig-based Aurora encryptor. Victims included international businesses such as Bayou Title, Christeyns, and Teckentrup. This incident marks one of the first documented cases of cybercriminals using commercial agentic AI coding tools to automate live corporate network intrusions.

Public health advocates have accused the U.S. Environmental Protection Agency of manipulating safety assessments for tetrabromobisphenol A, a widely used and toxic flame retardant. Non-profit legal organization Earthjustice stated in public comments that the agency's new draft risk assessment incorrectly claimed the chemical is no longer utilized in children's clothing and underestimated exposure risks through consumer dust and recycled plastics. Independent research links the substance to hormone disruption, developmental harms, and potential carcinogenicity. Critics further challenged the agency's heavy reliance on industry-aligned studies, noting potential conflicts of interest regarding scientific advisors. The EPA maintained that its evaluation utilized standard scientific review processes under federal regulatory guidelines. Environmental groups have demanded a comprehensive review of the draft assessment and extended public input periods to address widespread health concerns across the United States.