It's still unknown how attackers got access to Anthropic's verified Cursor account.