Gurucul is a security analytics company founded in data science that delivers radical clarity about cyber risk. We analyze enterprise data at scale using ML/AI

El Segundo, CA
Joined May 2012
The LiteLLM 1.107.0 supply chain attack deployed an infostealer targeting cloud credentials, AI API keys, SSH keys, and developer secrets through malicious Python startup files. gurucul.com/blog/inside-the-… #Cybersecurity #ThreatResearch
22
AI is helping threat actors plan and execute cybercrime. Hirudo uses deceptive software updates to distribute malicious banking apps, putting credentials and financial data at risk. jipeio.s.gy/meEiW3 jipeio.s.gy/n4rOHO #ThreatIntelligence #CyberSecurity
22
Scarlettgroup alleges a Rajasthan Police data leak involving VPN credentials, client certificates, mailboxes and investigation records. If authentic, exposed access material could enable unauthorized access and targeted attacks. gurucul.com/blog/rajasthan-p… #CyberSecurity
32
𝐂𝐨𝐮𝐥𝐝 𝐲𝐨𝐮𝐫 𝐢𝐧𝐬𝐢𝐝𝐞𝐫 𝐫𝐢𝐬𝐤 𝐩𝐫𝐨𝐠𝐫𝐚𝐦 𝐬𝐮𝐫𝐯𝐢𝐯𝐞 𝐓𝐡𝐞 𝐓𝐡𝐢𝐧𝐠? Trusted identities can be compromised. 𝐔𝐄𝐁𝐀 and behavioral risk analytics help uncover suspicious activity. Trust behavior, not just identity. #InsiderRisk #CyberSecurity
39
Supply chain attacks put enterprises at risk through RCE vulnerabilities, identity abuse, and AI assisted intrusions. For CISOs and security leaders, stronger threat detection and faster response are critical to business resilience. gurucul.com/blog/enterprise-… #ThreatDetection
15
Critical PHP RCE vulnerabilities threaten exposed systems. SEO poisoning delivers ArmorSteal malware. AI assisted hacking campaigns scale reconnaissance and intrusion. jipeio.s.gy/qV38Xi jipeio.s.gy/Gh84th jipeio.s.gy/jWUGxO #ThreatIntelligence #CyberSecurity
31
PHP2Shell (CVE-2026-109618, CVE-2026-109619) may enable unauthenticated remote code execution, putting enterprise systems and data at risk. Read the analysis and take steps to protect your systems: gurucul.com/blog/php2shell-c… #Cybersecurity #RCE
70
K0T targets exposed network edge devices. AI site builders host phishing pages to steal credentials. Compromised LiteLLM packages expose cloud and AI secrets. bit.ly/4elfOta bit.ly/4i27KzN jipeio.s.gy/lLdLSX #ThreatIntelligence #CyberSecurity
29
Trust is becoming an attack surface. AI driven malware, identity theft, and compromised infrastructure highlight why enterprises must connect security signals and respond faster. gurucul.com/blog/when-trust-… #Cybersecurity #ThreatIntel
37
SafePay deploys ransomware for financial extortion. Bronze Sandcastle uses DLL sideloading to conceal malicious payloads. Swallowtail targets NATO defense organizations. bit.ly/4slMLvw bit.ly/4yybopY bit.ly/4yvktzR #ThreatIntelligence #CyberSecurity
28
🤝 𝗦𝗶𝗹𝘃𝗲𝗿 𝗣𝗮𝗿𝘁𝗻𝗲𝗿 – @Gurucul ! We are delighted to Welcome @Gurucul as our 𝗦𝗶𝗹𝘃𝗲𝗿 𝗣𝗮𝗿𝘁𝗻𝗲𝗿 for the 𝟭𝟴𝘁𝗵 𝗖𝗜𝗦𝗢 𝗖𝗼𝗻𝗰𝗹𝗮𝘃𝗲 & 𝗔𝘄𝗮𝗿𝗱𝘀 𝟮𝟬𝟮𝟲 – 𝗕𝗲𝗻𝗴𝗮𝗹𝘂𝗿𝘂! @Gurucul helps security teams identify and respond to emerging risk earlier by bringing together signals across users, machines and AI systems. With more than a decade of expertise in behavioral AI, Security Operations and Insider Risk, Gurucul's open data architecture automatically collects and routes signals to the customer's chosen store, reducing data costs by up to 87%. Its unified entity intelligence reasons across the data, fusing behavioral AI and traditional detections into a single active risk score and contextual case with evidence as known and novel threats develop. Analysts and Gurucul's agents work cases together and respond at speed within defined controls. Gurucul was named a Leader in the 2025 Gartner® Magic Quadrant™ for Security Information and Event Management (SIEM), providing independent validation of its approach and capabilities. 📅 𝗧𝗵𝘂𝗿𝘀𝗱𝗮𝘆, 𝟮𝟲𝘁𝗵 𝗡𝗼𝘃𝗲𝗺𝗯𝗲𝗿 𝟮𝟬𝟮𝟲 📍 𝗧𝗮𝗷 𝗠𝗚 𝗥𝗼𝗮𝗱, 𝗕𝗲𝗻𝗴𝗮𝗹𝘂𝗿𝘂 🔗 𝗘𝘅𝗽𝗹𝗼𝗿𝗲 𝗢𝘂𝗿 𝗣𝗮𝗿𝘁𝗻𝗲𝗿: gurucul.com/ 🔗 𝗘𝘅𝗽𝗹𝗼𝗿𝗲 𝘁𝗵𝗲 𝗖𝗼𝗻𝗰𝗹𝗮𝘃𝗲: cisoconclave.com/#bengaluru #CISOConclaveBengaluru18 #UBSForums #Gurucul #Cybersecurity
1
1
1
68
ConnectWise Cloud Backup abuse exposes Microsoft 365 tenant tokens. CVE 2026 88771 enables unauthenticated RCE against Citrix NetScaler infrastructure. bit.ly/4shvH9F bit.ly/4sA7I65 #ThreatIntelligence #CyberSecurity
1
86
Supply chain tampering in software updates. PaperCut exploitation from attacker toolkits and weak API controls. Coruna like and DarkSword target vulnerable iOS devices. bit.ly/4BjWy9j bit.ly/4eLg3hg bit.ly/4hZV90c #ThreatIntelligence #CyberSecurity
52
SOC modernization goes beyond technology. It requires better context, smarter analytics and faster investigations. See how Vodafone Idea Limited modernized security operations with AI and identity-driven analytics: bit.ly/484Xgtv #SOCModernization #NextGenSIEM
210
VoidShadow, Cisco firewall exploitation and passkey themed social engineering highlight critical enterprise risks. CISOs need correlated identity, endpoint and network telemetry to detect threats and investigate compromise. bit.ly/4yoJoFs #ThreatIntelligence
24
VoidShadow, Cisco firewall exploitation and passkey themed social engineering highlight critical enterprise risks. CISOs need correlated identity, endpoint and network telemetry to detect threats and investigate compromise. bit.ly/4yoJoFs #ThreatIntelligence
1
1
37
You can delegate work to AI. You still own the risk. Gurucul CEO Saryu Nayyar explains why AI security needs visibility, controls, and behavioral risk monitoring to protect enterprise systems and sensitive data. gurucul.com/blog/you-can-del… #AISecurity #Cybersecurity
20
Fake Calendly and Meta Careers pages steal credentials. PeerStitch targets FortiGate environments. UAT 6275 targets government organizations across the CIS. bit.ly/4yXqPta bit.ly/4dGPY2v bit.ly/4yVQceI #ThreatIntelligence #CyberSecurity
38
CVE-2026-60758: Oracle Siebel AI authentication bypass risk. Enterprise leaders should prioritize patching, access controls, and API monitoring to protect sensitive data. gurucul.com/blog/cve-2026-60… #Cybersecurity #CISO
1
1
48
Casbaneiro combines banking malware with a malicious Chromium extension. Apex Accelerator comes under scrutiny. Deno and SumatraPDF are chained to bypass app bound encryption. bit.ly/4zvlNng bit.ly/4zweJH2 bit.ly/4ikFkkD #ThreatIntelligence
47