What are the opening hours?

Monday 8am - 6pm Tuesday 8am - 6pm Wednesday 8am - 6pm Thursday 8am - 6pm Friday 8am - 6pm

Gurucul, 222 North Pacific Coast Highway, Suite 1322, El Segundo, CA (2026)

10/15/2026

The team is still buzzing after a night at Cleveland Browns Stadium. 🏈

They say defense wins championships, and that’s just as true in cybersecurity. So we brought together security and technology leaders for an evening of great food, great conversation, and a few good stories from the
field.

Game ball goes to John Schuller. When he’s not at Gurucul, John works the sidelines as a member of the Browns’ Chain Gang, so it’s no surprise he knows how to move the chains. This night was his playbook from
kickoff to the final whistle.

Every great drive needs a strong offensive line. Thank you to Jeremiah Sahlberg, Chris Granzier, and Jamie Gray of Tevora, Michael Gross of EnGrossed Advisory, and Gurucul teammates JoJo Brotamonte, Katie Wright, and John McGovern for doing the blocking and tackling behind the scenes.

And then there was Greg Pruitt. The Browns legend had the room hanging on every story, and he proved he still knows how to make people lean in.

To everyone who joined our huddle: thank you. We’re already drawing up plays for the next one.

10/14/2026

Enterprise insider risk is evolving. Is your security strategy evolving with it?

As AI agents, service accounts, and machine identities gain access to critical systems and sensitive data, the traditional boundaries of insider risk are changing. Risk no longer sits within a single user, identity, or security alert. It can emerge across connected activities, permissions, and behaviors that remain fragmented across security tools.

For CISOs and enterprise security leaders, this creates a critical challenge: how do you distinguish routine business activity from emerging risk when the evidence is spread across different systems, identities, and teams?

The next stage of insider risk maturity is not simply about adding more tools or collecting more data. It is about connecting existing security signals to understand relationships, establish behavioral context, and identify developing risks before they escalate.

A more connected approach brings identity, access, behavioral intelligence, and data activity into a unified view, helping security teams investigate with greater context, make informed decisions, and respond proportionately.

As enterprises accelerate AI adoption, the ability to connect risk across people, technology, and AI agents will become increasingly important to maintaining security without slowing innovation.

Discover how to advance your insider risk strategy:

https://gurucul.com/blog/the-next-challenge-for-mature-insider-risk-programs/

Assess your AI risk:

https://gurucul.com/ai-risk-assessment/

10/14/2026

The next wave of cyber threats is challenging traditional security assumptions, from AI operated malware to deceptive browser extensions and compromised mobile devices.

Our latest threat intelligence research explores three developments that show how attackers are exploiting emerging technologies and trusted user environments to create new security risks.

C2Agent: AI Operated Windows Malware

C2Agent introduces an approach to Windows malware that uses large language models, MCP skills, and living off the AI techniques. It highlights the evolving intersection of AI capabilities and malicious operations, creating new challenges for security teams monitoring suspicious endpoint behavior.

https://gurucul.com/latest-threats/c2agent-llm-operated-windows-malware-with-mcp-skills-and-living-off-the-ai/

Fake Cryptocurrency Wallet Extensions

Deceptive browser extensions impersonate cryptocurrency wallets while appearing to offer simple, legitimate functionality. This activity highlights the risks of trusting extensions without evaluating their behavior and potential access to sensitive wallet information.

https://gurucul.com/latest-threats/browser-extensions-discribed-as-simple-app-impersonate-cryptocurrency-wallets/

Midnight Mimosa: Mobile Device Compromise

Midnight Mimosa examines the risk of mobile device compromise occurring before a user even turns on the phone. The research raises important questions about device integrity, supply chain trust, and the limits of relying on user awareness alone.

https://gurucul.com/latest-threats/the-phone-was-compromised-before-the-user-turned-it-on-the-rise-of-midnight-mimosa/

For enterprise security leaders, these developments highlight a broader challenge: technology that users trust can become part of the attack surface.

AI enabled malware, deceptive software, and compromised devices require security teams to look beyond known indicators and examine behavior across endpoints, applications, identities, and connected environments.

Threat intelligence helps explain how these techniques evolve. Behavioral analytics helps security teams identify activity that deviates from expected patterns and investigate potential threats with greater context.

As the attack surface evolves, security visibility must evolve with it.

10/13/2026

Weaponizing Deno and SumatraPDF, attackers are chaining trusted runtimes, signed applications, and in memory ex*****on to bypass conventional defenses and target browser credentials.

A newly analyzed infostealer campaign demonstrates how DLL side loading, scheduled task hijacking, and Chrome DevTools Protocol abuse can enable stealthy credential theft, including browser session cookie theft designed to bypass Chrome’s App Bound Encryption protections.

For enterprise security leaders, this campaign highlights a critical detection challenge: legitimate software and trusted ex*****on environments can be abused at multiple stages of an attack.

Effective detection requires correlating process behavior, runtime ex*****on, DLL loading, memory activity, scheduled task modifications, and suspicious browser debugging sessions.

Read the full threat research for the technical breakdown, behavioral detection opportunities, and MITRE ATT&CK mapping.

https://gurucul.com/blog/weaponizing-deno-how-malware-chains-trusted-runtimes-and-sumatrapdf-to-bypass-app-bound-encryption/

10/13/2026

AI agents are designed to complete tasks, adapt to obstacles and work across systems. But what happens when that adaptability creates unintended security risks?

Our latest research examines two important findings that expose the fragility of AI agents.

In one case, agents attempting to download a photograph moved on to probing a website for vulnerabilities. In another, a malicious instruction hidden in database content passed between agents and ultimately triggered an unauthorized email containing sensitive applicant data.

Neither incident began with a dangerous user request. The risks emerged from the actions taken along the way.

For enterprise security leaders, this highlights a critical challenge: monitoring what AI agents are asked to do is not enough. Organizations must understand what agents actually do, which identities and resources they can access, and how their behavior changes across tasks and interactions.

Gurucul AI Risk and Response applies Behavioral AI to monitor AI agents as distinct entities, connect their activity with ownership, permissions and security context, and help security teams identify emerging risks before they escalate.

As enterprises move toward autonomous and multi-agent systems, behavioral visibility must become a fundamental part of AI security.

Read the full analysis:
https://gurucul.com/blog/were-still-learning-how-fragile-ai-agents-are/

Learn more about Gurucul AI Risk and Response:
https://gurucul.com/products/gurucul-ai-risk-and-response/

10/13/2026

Cyber threats are targeting the trust organizations place in digital events, enterprise software, and network infrastructure.

Our latest threat intelligence research examines three campaigns that expose different risks for enterprise security teams, from real time identity attacks to server exploitation and infrastructure mapping.

UAT 11985: AI Assisted Event Lures

UAT 11985 uses AI assisted event lures to deliver real time Google adversary in the middle phishing. The campaign highlights the risks of convincing social engineering and phishing techniques designed to compromise user authentication.

https://gurucul.com/latest-threats/uat-11985-ai-assisted-event-lures-delivering-real-time-google-aitm-phishing/

AhsayCBS Vulnerability Exploitation

Threat actors are exploiting critical AhsayCBS flaws to deploy webshells and the XMRig cryptominer. This activity highlights how vulnerable backup infrastructure can become an entry point for unauthorized access and cryptomining operations.

https://gurucul.com/latest-threats/threat-actors-exploit-critical-ahsaycbs-flaws-to-drop-webshells-and-xmrig-cryptominer/

Brazilian Access Broker Targeting Latin America

A Brazilian access broker is targeting Latin America, with infrastructure mapping linked to TLS certificate analysis. The activity highlights how certificate data can help researchers connect infrastructure and investigate potential attack activity.

https://gurucul.com/latest-threats/brazilian-access-broker-targeting-latin-america-mapping-brazetsu-infrastructure-via-tls-certificates/

For enterprise leaders, these threats reinforce the need to look beyond isolated alerts.

Identity activity, server behavior, and infrastructure relationships each provide valuable signals. When security teams connect these signals with threat intelligence and behavioral context, they can better investigate suspicious activity and prioritize emerging risks.

Stronger security starts with understanding how threats operate, where trust is abused, and which signals matter most.

10/13/2026

𝐒𝐜𝐚𝐥𝐞 𝐖𝐢𝐭𝐡𝐨𝐮𝐭 𝐁𝐨𝐮𝐧𝐝𝐚𝐫𝐢𝐞𝐬. 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐖𝐢𝐭𝐡𝐨𝐮𝐭 𝐁𝐥𝐢𝐧𝐝 𝐒𝐩𝐨𝐭𝐬.

India Mobile Congress 2026 brought one message into sharp focus: digital growth is accelerating across connectivity, AI, infrastructure, and enterprise technology.

That growth also expands the security challenge.

As organizations add more users, identities, applications, cloud services, and AI-driven systems, security teams need broader visibility, stronger behavioral context, and faster ways to identify what matters.

Three priorities stood out for us at IMC 2026:

1. 𝐌𝐨𝐝𝐞𝐫𝐧𝐢𝐳𝐞 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐨𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬 with Next-Gen SIEM that can reduce noise and improve detection across complex environments.

2. 𝐔𝐧𝐝𝐞𝐫𝐬𝐭𝐚𝐧𝐝 𝐛𝐞𝐡𝐚𝐯𝐢𝐨𝐫, 𝐧𝐨𝐭 𝐣𝐮𝐬𝐭 𝐞𝐯𝐞𝐧𝐭𝐬 to identify insider risk, compromised identities, and unusual activity earlier.

3. 𝐒𝐞𝐜𝐮𝐫𝐞 𝐀𝐈 𝐚𝐝𝐨𝐩𝐭𝐢𝐨𝐧 by addressing emerging risk across applications, agents, access, and data.

The opportunity ahead is significant. So is the responsibility to secure it.

𝐃𝐞𝐭𝐞𝐜𝐭 𝐖𝐡𝐚𝐭 𝐎𝐭𝐡𝐞𝐫𝐬 𝐌𝐢𝐬𝐬. 𝐒𝐞𝐜𝐮𝐫𝐞 𝐖𝐡𝐚𝐭’𝐬 𝐍𝐞𝐱𝐭.

10/12/2026

A browser vulnerability can become an enterprise security incident when attackers exploit it before organizations can respond.

Our latest research examines CVE-2026-87491, a high-severity out-of-bounds write vulnerability in Google Chrome’s V8 JavaScript and WebAssembly engine. A specially crafted webpage could exploit the flaw in vulnerable Chrome versions, making timely patching and browser security essential.

For enterprise security leaders, vulnerability management is only part of the equation. Organizations also need visibility into suspicious browser activity, endpoint behavior and related security signals to identify potential exploitation and investigate activity that follows.

Security teams should prioritize vendor guidance, apply available security updates and monitor for suspicious activity across their environments.

Read the technical analysis:

https://gurucul.com/blog/cve-2026-87491-chrome-v8-zero-day-vulnerability/

10/12/2026

Cyber threats are evolving across espionage operations, deceptive applications, and trusted software supply chains. For enterprise security leaders, the challenge is identifying malicious activity before it leads to data exposure or broader compromise.

Our latest threat intelligence coverage examines three developments that reveal how attackers are adapting their techniques across different environments.

Chinese Government Linked Threat Actors

Chinese government linked cyber threat actors are combining automated techniques with hands on hacking tools to steal sensitive data. This blend of approaches highlights the need to detect both large scale activity and targeted actions that may resemble legitimate administration.

https://gurucul.com/latest-threats/chinese-government-linked-cyber-threat-actors-combine-automated-and-hands-on-hacking-tools-to-steal-sensitive-data/

MatchBoil

MatchBoil highlights how established malicious intentions can persist even as tactics evolve. Understanding the campaign's specific behavior is essential for recognizing suspicious activity and assessing potential exposure.

https://gurucul.com/latest-threats/matchboil-new-tricks-same-old-evil-intentions/

Suspected TraderTraitor Group

A suspected TraderTraitor group is using a trojanized Terraform provider to deliver cross platform malware. The campaign highlights how trusted infrastructure as code tools can become a pathway for malicious code across different operating environments.

https://gurucul.com/latest-threats/suspected-tradertraitor-group-uses-trojanized-terraform-provider-to-deliver-cross-platform-malware/

These developments reinforce a critical lesson for security leaders: threats can emerge through both direct intrusion activity and tools that organizations rely on every day.

Effective defense requires visibility into unusual system behavior, sensitive data access, and changes across software and cloud infrastructure. Threat intelligence adds context to these signals, helping security teams investigate suspicious activity and make informed response decisions.

10/12/2026

𝐓𝐡𝐚𝐧𝐤 𝐲𝐨𝐮, 𝐈𝐧𝐝𝐢𝐚 𝐌𝐨𝐛𝐢𝐥𝐞 𝐂𝐨𝐧𝐠𝐫𝐞𝐬𝐬 2026.

Four days of conversations, ideas, innovation, and connections at 𝐈𝐌𝐂 2026 reinforced one thing clearly: as India’s digital ambitions scale, trust and security have to scale with them.

From AI and connected infrastructure to enterprise security and digital resilience, we had the opportunity to exchange perspectives with customers, partners, technology leaders, and innovators from across the industry.

Thank you to everyone who visited the 𝐆𝐮𝐫𝐮𝐜𝐮𝐥 𝐭𝐞𝐚𝐦 𝐚𝐭 𝐇𝐚𝐥𝐥 2, 𝐁𝐨𝐨𝐭𝐡 𝐂14, shared their challenges, explored our approach, and contributed to the conversations around what comes next.

We’re leaving IMC 2026 with stronger connections, sharper insights, and renewed momentum around 𝐍𝐞𝐱𝐭-𝐆𝐞𝐧 𝐒𝐈𝐄𝐌, 𝐈𝐧𝐬𝐢𝐝𝐞𝐫 𝐑𝐢𝐬𝐤 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭, 𝐚𝐧𝐝 𝐀𝐈 𝐑𝐢𝐬𝐤 & 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐞.

Detect What Others Miss. Secure What’s Next.

Thank you, New Delhi. Until next time.

Gurucul

10/15/2026

10/14/2026

10/14/2026

10/13/2026

10/13/2026

10/13/2026

10/13/2026

10/12/2026

10/12/2026

10/12/2026

Address

Opening Hours

Website

Alerts

Contact The Business

Shortcuts

Share

Category

Listing takedown request

Monday	8am - 6pm
Tuesday	8am - 6pm
Wednesday	8am - 6pm
Thursday	8am - 6pm
Friday	8am - 6pm