AI broke cybersecurity defenses as stolen keys led to a malicious plugin reaching 5,000 companies
Breaches Build On One Another
Stamos, chief security officer at Cognition and a lecturer at Stanford University Cyber Policy Center, described a succession of breaches among AI-related companies and neoclouds. He also cited the Binance hack, which he called the largest heist in human history.
In the chain he outlined, attackers stole API keys in a breach at Fireworks, an AI services provider. Those keys helped them access Cursor, where they pushed a harmful plugin that reached 5,000 companies and created the potential for further breaches.
AI Raises Attackers’ Capabilities
Stamos said a range of groups are responsible for attacks, rather than a single country or adversary. He pointed to both private actors and state actors, including Russia and North Korea.
In his view, AI is helping attackers identify and exploit vulnerabilities. He described this as the beginning of a major increase in adversary capability, while warning that the effects are still unfolding.
A Difficult Period Ahead
The scale and pace of incidents have left security teams under sustained pressure. Stamos said one chief information security officer asked colleagues whether they were tired, and everyone agreed.
He expects a turbulent period as organizations work out how to respond to the new era. Stamos called it a possible “dark age,” but said he is not a long-term doomer about cybersecurity.
Security Questions Beyond Breaches
The discussion also touched on AI-generated misinformation and low-quality content, and how social networks might manage them. The episode is part one of a series about AI in real life.
Stamos compared the current disruption to the 1990s, when an always-online world was new. The conversation framed today’s security challenges as another period of rapid change.
Key points
- AI is helping attackers find and exploit weaknesses, Stamos says.
- A Fireworks breach reportedly enabled access to Cursor through stolen API keys.
- A harmful Cursor plugin reached 5,000 companies, creating potential breaches.
- Stamos expects a difficult adjustment period but is not pessimistic long term.