Gambit Security reported that Russian-speaking extortionists used Cursor AI to break into seven organizations in August 2026