Gurucul

AI agents, applications and machine identities are expanding the enterprise risk landscape. Gurucul AI Risk and Response helps security teams discover, prioritize and act on risky AI behavior before it escalates. gurucul.com/wp-content/uploa… #AISecurity #AIRisk #Gurucul

A fake Android casino app named TinstaPorn combines fraudulent gambling schemes with spyware. Built using Flutter, it collects phone numbers and precise location data, highlighting the risks of malicious mobile apps. gurucul.com/latest-threats/a… #AndroidSecurity #ThreatIntel

Insider threats can hide behind legitimate access. Integrating SIEM, UEBA, and SOAR helps security teams connect behavioral signals, prioritize risk, and accelerate response. Read the 2026 guide: gurucul.com/blog/how-to-inte… #InsiderRisk #CyberSecurity

Crafty Falcon uses AI to target India's BFSI sector, abusing payment APIs to initiate unauthorized fund transfers. CERT-In warns the campaign remains active. gurucul.com/latest-threats/c… #CyberSecurity #ThreatIntel

From AI-driven attacks and LLMJacking to ransomware, Android malware, SharePoint exploitation and cyberespionage, explore 15 emerging threats reshaping enterprise security. Read the threat intelligence report: gurucul.com/blog/phantom-ses… #Cybersecurity #ThreatIntel

Marsalek distributes infostealers as a service. Lindnor backdoor supports Anubis ransomware operations. Storm-2603 exploits SharePoint for fileless access and lateral movement. jipeio.s.gy/AUqykd jipeio.s.gy/SJmdfP jipeio.s.gy/DERMmh #ThreatIntelligence

Dark Project is an emerging ransomware group using double extortion and affiliate driven operations. Explore its 38 reported victims, targeted industries, attack techniques and MITRE ATT&CK mapping. gurucul.com/blog/threat-acto… #Cybersecurity #ThreatIntelligence

Happy Diwali from Gurucul. May the Festival of Lights bring joy, prosperity, and new beginnings to you and your loved ones. Here's to brighter celebrations, stronger connections, and a safer, more secure tomorrow. #HappyDiwali #Diwali2026 #Gurucul

ARTEX exposes AI assisted attack infrastructure. DARK PROJECT targets critical industries with double extortion. MIRAX hijacks Android devices to steal banking credentials and OTPs. jipeio.s.gy/lZW5JG jipeio.s.gy/woP6RI jipeio.s.gy/Cld9V7 #ThreatIntelligence

Shadow AI, overprivileged agents, and sensitive data exposure are expanding the AI attack surface. Can your security team see the risks? Discover your organization's AI exposure with a Free AI Risk Assessment: gurucul.com/ai-risk-assessme… #AISecurity #CyberSecurity

PHP2Shell exploits target internet facing Palo Alto firewalls. LLMJacking monetizes compromised AI resources. Trojanized installers hijack corporate bandwidth and computing power. jipeio.s.gy/GAzTgn jipeio.s.gy/0Ad5Ee jipeio.s.gy/EZsslD #ThreatIntelligence

AI powered attacks don't always mean AI powered success. Knaithe uses DeepSeek and Hermes Agent for reconnaissance and exploitation attempts, but successful intrusions relied on manual operations. gurucul.com/blog/threat-acto… #CyberSecurity #ThreatIntelligence

CyberStrikeAI automates enterprise intrusions using AI. BITTER deploys PapRAT for cyber espionage. XCPE compromises Android devices to power global botnet operations. bit.ly/4jPQqiS bit.ly/4iopfuk bit.ly/4yZC6Ir #ThreatIntelligence #CyberSecurity

One AI upload exposed data belonging to 3,182 patients at Johns Hopkins Bayview. Can your controls detect sensitive uploads before data leaves your organization now? AI Risk Assessment: bit.ly/47X6ZCl Blog: bit.ly/4iCJEed #AISecurity #InsiderRiskManagement

INJ3CTOR3 steals PBX credentials. Attackers abuse trusted MDM tools for remote access. BlackApex and SPY use AI assisted phishing kits to steal Microsoft 365 authentication tokens. bit.ly/4zr8Tau bit.ly/4zia0ck bit.ly/4iPlVZn #ThreatIntelligence

14 emerging cyber threats. AI powered cybercrime, banking trojans, AiTM phishing, certificate compromise and cross platform espionage. Explore Gurucul's latest threat intelligence: gurucul.com/blog/weekly-cybe… #Cybersecurity #Gurucul

TraderTraitor backdoors resurface in an Indian IT services firm. GOLD OGRE uses AI agents in Aur0ra ransomware operations. Noodle RAT targets Windows and Linux for espionage. jipeio.s.gy/xJ7sAy jipeio.s.gy/V2svBG jipeio.s.gy/0TOA9i #ThreatIntelligence

Plex2Shell chains four vulnerabilities (CVE-2026-96652, -96654, -96655, -96656) to enable unauthenticated RCE. Active exploitation has deployed cryptominers and proxy backdoors. Patch Plex Media Server to 1.43.3.10861 or later. gurucul.com/blog/plex2shell-… #Cybersecurity #RCE

CyberDakait deploys Android banking trojans across India. uCreator spyware steals Telegram authentication data & targets WeChat. MR ROBOT delivers banking malware through a MaaS. jipeio.s.gy/Tac1xV jipeio.s.gy/ygUQrH jipeio.s.gy/arJAxx #ThreatIntelligence

The eMudhra CA compromise exposed eight intermediate CA private keys due to weak key generation, threatening TLS trust and code signing. Enterprises must verify certificate revocation and cryptographic controls. gurucul.com/blog/emudhra-int… #Cybersecurity