The LiteLLM 1.107.0 supply chain attack deployed an infostealer targeting cloud credentials, AI API keys, SSH keys, and developer secrets through malicious Python startup files.
gurucul.com/blog/inside-the-…
#Cybersecurity #ThreatResearch
AI is helping threat actors plan and execute cybercrime. Hirudo uses deceptive software updates to distribute malicious banking apps, putting credentials and financial data at risk.
jipeio.s.gy/meEiW3
jipeio.s.gy/n4rOHO
#ThreatIntelligence #CyberSecurity
Scarlettgroup alleges a Rajasthan Police data leak involving VPN credentials, client certificates, mailboxes and investigation records. If authentic, exposed access material could enable unauthorized access and targeted attacks.
gurucul.com/blog/rajasthan-p…
#CyberSecurity
𝐂𝐨𝐮𝐥𝐝 𝐲𝐨𝐮𝐫 𝐢𝐧𝐬𝐢𝐝𝐞𝐫 𝐫𝐢𝐬𝐤 𝐩𝐫𝐨𝐠𝐫𝐚𝐦 𝐬𝐮𝐫𝐯𝐢𝐯𝐞 𝐓𝐡𝐞 𝐓𝐡𝐢𝐧𝐠? Trusted identities can be compromised. 𝐔𝐄𝐁𝐀 and behavioral risk analytics help uncover suspicious activity. Trust behavior, not just identity. #InsiderRisk #CyberSecurity
Supply chain attacks put enterprises at risk through RCE vulnerabilities, identity abuse, and AI assisted intrusions. For CISOs and security leaders, stronger threat detection and faster response are critical to business resilience.
gurucul.com/blog/enterprise-…
#ThreatDetection
Critical PHP RCE vulnerabilities threaten exposed systems. SEO poisoning delivers ArmorSteal malware. AI assisted hacking campaigns scale reconnaissance and intrusion.
jipeio.s.gy/qV38Xi
jipeio.s.gy/Gh84th
jipeio.s.gy/jWUGxO
#ThreatIntelligence #CyberSecurity
PHP2Shell (CVE-2026-109618, CVE-2026-109619) may enable unauthenticated remote code execution, putting enterprise systems and data at risk. Read the analysis and take steps to protect your systems:
gurucul.com/blog/php2shell-c…
#Cybersecurity #RCE
K0T targets exposed network edge devices. AI site builders host phishing pages to steal credentials. Compromised LiteLLM packages expose cloud and AI secrets.
bit.ly/4elfOta
bit.ly/4i27KzN
jipeio.s.gy/lLdLSX
#ThreatIntelligence #CyberSecurity
Trust is becoming an attack surface. AI driven malware, identity theft, and compromised infrastructure highlight why enterprises must connect security signals and respond faster.
gurucul.com/blog/when-trust-…
#Cybersecurity #ThreatIntel
SafePay deploys ransomware for financial extortion. Bronze Sandcastle uses DLL sideloading to conceal malicious payloads. Swallowtail targets NATO defense organizations.
bit.ly/4slMLvw
bit.ly/4yybopY
bit.ly/4yvktzR
#ThreatIntelligence #CyberSecurity
Gurucul retweeted
🤝 𝗦𝗶𝗹𝘃𝗲𝗿 𝗣𝗮𝗿𝘁𝗻𝗲𝗿 – @Gurucul !
We are delighted to Welcome @Gurucul as our 𝗦𝗶𝗹𝘃𝗲𝗿 𝗣𝗮𝗿𝘁𝗻𝗲𝗿 for the 𝟭𝟴𝘁𝗵 𝗖𝗜𝗦𝗢 𝗖𝗼𝗻𝗰𝗹𝗮𝘃𝗲 & 𝗔𝘄𝗮𝗿𝗱𝘀 𝟮𝟬𝟮𝟲 – 𝗕𝗲𝗻𝗴𝗮𝗹𝘂𝗿𝘂!
@Gurucul helps security teams identify and respond to emerging risk earlier by bringing together signals across users, machines and AI systems. With more than a decade of expertise in behavioral AI, Security Operations and Insider Risk, Gurucul's open data architecture automatically collects and routes signals to the customer's chosen store, reducing data costs by up to 87%. Its unified entity intelligence reasons across the data, fusing behavioral AI and traditional detections into a single active risk score and contextual case with evidence as known and novel threats develop.
Analysts and Gurucul's agents work cases together and respond at speed within defined controls. Gurucul was named a Leader in the 2025 Gartner® Magic Quadrant™ for Security Information and Event Management (SIEM), providing independent validation of its approach and capabilities.
📅 𝗧𝗵𝘂𝗿𝘀𝗱𝗮𝘆, 𝟮𝟲𝘁𝗵 𝗡𝗼𝘃𝗲𝗺𝗯𝗲𝗿 𝟮𝟬𝟮𝟲
📍 𝗧𝗮𝗷 𝗠𝗚 𝗥𝗼𝗮𝗱, 𝗕𝗲𝗻𝗴𝗮𝗹𝘂𝗿𝘂
🔗 𝗘𝘅𝗽𝗹𝗼𝗿𝗲 𝗢𝘂𝗿 𝗣𝗮𝗿𝘁𝗻𝗲𝗿: gurucul.com/
🔗 𝗘𝘅𝗽𝗹𝗼𝗿𝗲 𝘁𝗵𝗲 𝗖𝗼𝗻𝗰𝗹𝗮𝘃𝗲: cisoconclave.com/#bengaluru
#CISOConclaveBengaluru18 #UBSForums #Gurucul #Cybersecurity
ConnectWise Cloud Backup abuse exposes Microsoft 365 tenant tokens. CVE 2026 88771 enables unauthenticated RCE against Citrix NetScaler infrastructure.
bit.ly/4shvH9F
bit.ly/4sA7I65
#ThreatIntelligence #CyberSecurity
Supply chain tampering in software updates. PaperCut exploitation from attacker toolkits and weak API controls. Coruna like and DarkSword target vulnerable iOS devices.
bit.ly/4BjWy9j
bit.ly/4eLg3hg
bit.ly/4hZV90c
#ThreatIntelligence #CyberSecurity
SOC modernization goes beyond technology. It requires better context, smarter analytics and faster investigations.
See how Vodafone Idea Limited modernized security operations with AI and identity-driven analytics:
bit.ly/484Xgtv
#SOCModernization #NextGenSIEM
VoidShadow, Cisco firewall exploitation and passkey themed social engineering highlight critical enterprise risks. CISOs need correlated identity, endpoint and network telemetry to detect threats and investigate compromise.
bit.ly/4yoJoFs
#ThreatIntelligence
VoidShadow, Cisco firewall exploitation and passkey themed social engineering highlight critical enterprise risks. CISOs need correlated identity, endpoint and network telemetry to detect threats and investigate compromise.
bit.ly/4yoJoFs
#ThreatIntelligence
You can delegate work to AI. You still own the risk.
Gurucul CEO Saryu Nayyar explains why AI security needs visibility, controls, and behavioral risk monitoring to protect enterprise systems and sensitive data.
gurucul.com/blog/you-can-del…
#AISecurity #Cybersecurity
Fake Calendly and Meta Careers pages steal credentials. PeerStitch targets FortiGate environments. UAT 6275 targets government organizations across the CIS.
bit.ly/4yXqPta
bit.ly/4dGPY2v
bit.ly/4yVQceI
#ThreatIntelligence #CyberSecurity
CVE-2026-60758: Oracle Siebel AI authentication bypass risk. Enterprise leaders should prioritize patching, access controls, and API monitoring to protect sensitive data.
gurucul.com/blog/cve-2026-60…
#Cybersecurity #CISO
Casbaneiro combines banking malware with a malicious Chromium extension. Apex Accelerator comes under scrutiny. Deno and SumatraPDF are chained to bypass app bound encryption.
bit.ly/4zvlNng
bit.ly/4zweJH2
bit.ly/4ikFkkD
#ThreatIntelligence





















