UltraViolet Cyber published an advisory breaking down Aurora, a Russian-speaking ransomware affiliate using a commercial AI coding assistant to plan intrusions and execute offensive commands directly.
Public source
Publisher name
Public post
AI-assisted ransomware just stopped being a novelty. Two separate research teams independently confirmed it's now a repeatable part of an active, multi-victim operation.…
Company
UltraViolet Cyber
Continuously Assess. Consistently Defend.
- Industry
- Computer and Network Security
- Location
- McLean, US
- Company size
- 501–1,000 employees
About UltraViolet Cyber
UltraViolet Cyber is the only security operations partner that unifies red, blue, and purple team capabilities into one integrated program — finding what's vulnerable, stopping active threats, and validating that your defenses hold under real pressure. Built by former U.S. intelligence community operators with 30+ years of experience, we serve 400+ Global 2000 enterprises and federal agencies. Our practitioner-led and AI-accelerated closed-loop operations turn offensive findings into defensive weapons immediately — so gaps close in real time and defenses improve before attackers can exploit what testing uncovers. Offense informs defense. Defense sharpens offense. Security that gets smarter — and stronger — with every iteration. UltraViolet is at the forefront of AI security — purpose-built to test, validate, and govern the AI systems organizations are deploying today. From adversarial testing of models, pipelines, and agents to pre-production threat modeling and board-ready governance frameworks, UltraViolet brings the same offensive and defensive rigor to AI that it applies across the enterprise. UltraViolet is ranked #19 on the Top 250 MSSP List and is headquartered in McLean, Virginia. Learn more at uvcyber.com.
See moreLatest activity
Latest activity from UltraViolet Cyber
8 signals
Research & Knowledge
UltraViolet Cyber Managing Principal Aditi Gupta breaks down why customers asking for an OWASP Top 10 checklist need to map their attack surface and test like a real adversary.
Products & Services
UltraViolet Cyber built a new way to close the gap in security validation by multiplying across log sources and platforms and a full validation pass eats a day, most of it spent waiting on a terminal.
People
UltraViolet Cyber is hiring a Senior SOC Analyst to join the MDR team.
Discover more
Similar signals
Similar public activity from other companies.
Research & Knowledge
CloudSEK
CloudSEK disclosed exclusive details of Russian-speaking ransomware group aurora and how they used an AI coding assistant cursor to launch attacks targeting over 20 organisations.
Research & Knowledge
Vali Cyber
Vali Cyber spotlighted research into Aurora ransomware operators using AI coding assistants to plan and execute attacks against real targets, including ESX and vCenter servers.
Research & Knowledge
Tuskira
Tuskira published a Threat Brief on August 31, 2026 detailing how Aurora ransomware operators used Cursor AI agent during intrusions.
Research & Knowledge
Ransom-ISAC
Ransom-ISAC tracks ZaWoo, a ransomware group that now publishes AI-generated victim reports based on a Jupyter Notebook pipeline.
Research & Knowledge
CISO community Nederland