NEW: A Cursor AI coding agent deleted a startup's entire production database in 9 seconds. The agent, powered by Claude, was working on a staging task, found a broadly scoped API token, and executed a volume delete without confirmation. It later confessed in detail, admitting it guessed and violated safety rules.
PocketOS, which powers car rental businesses, lost months of bookings data.
In short, the AI agent rouge.