#Advanced attacks

[jcmarchi]

Saryu Nayyar, CEO and Founder of Gurucul – Interview Series

New Post has been published on https://thedigitalinsider.com/saryu-nayyar-ceo-and-founder-of-gurucul-interview-series/

Saryu Nayyar, CEO and Founder of Gurucul – Interview Series

Saryu Nayyar is an internationally recognized cybersecurity expert, author, speaker and member of the Forbes Technology Council. She has more than 15 years of experience in the information security, identity and access management, IT risk and compliance, and security risk management sectors.

She was named EY Entrepreneurial Winning Women in 2017. She has held leadership roles in security products and services strategy at Oracle, Simeio, Sun Microsystems, Vaau (acquired by Sun) and Disney. Saryu also spent several years in senior positions at the technology security and risk management practice of Ernst & Young.

Gurucul is a cybersecurity company that specializes in behavior-based security and risk analytics. Its platform leverages machine learning, AI, and big data to detect insider threats, account compromise, and advanced attacks across hybrid environments. Gurucul is known for its Unified Security and Risk Analytics Platform, which integrates SIEM, UEBA (User and Entity Behavior Analytics), XDR, and identity analytics to provide real-time threat detection and response. The company serves enterprises, governments, and MSSPs, aiming to reduce false positives and accelerate threat remediation through intelligent automation.

What inspired you to start Gurucul in 2010, and what problem were you aiming to solve in the cybersecurity landscape?

Gurucul was founded to help Security Operations and Insider Risk Management teams obtain clarity into the most critical cyber risks impacting their business. Since 2010 we’ve taken a behavioral and predictive analytics approach, rather than rules-based, which has generated over 4,000+ machine learning models that put user and entity anomalies into context across a variety of different attack and risk scenarios. We’ve built upon this as our foundation, moving from helping large Fortune 50 companies solve Insider Risk challenges, to helping companies gain radical clarity into ALL cyber risk. This is the promise of REVEAL, our unified and AI-Driven Data and Security Analytics platform. Now we’re building on our AI mission with a vision to deliver a Self-Driving Security Analytics platform, using Machine Learning as our foundation but now layering on Generative and Agentic AI capabilities across the entire threat lifecycle. The goal is for analysts and engineers to spend less time in the myriad in complexity and more time focused on meaningful work. Allowing machines to amplify the definition of their day-to-day activities.

Having worked in leadership roles at Oracle, Sun Microsystems, and Ernst & Young, what key lessons did you bring from those experiences into founding Gurucul?

My leadership experience at Oracle, Sun Microsystems, and Ernst & Young strengthened my ability to solve complex security challenges and provided me with an understanding of the challenges that Fortune 100 CEOs and CISOs face. Collectively, it allowed me to gain a front-row seat the technological and business challenges most security leaders face and inspired me to build solutions to bridge those gaps.

How does Gurucul’s REVEAL platform differentiate itself from traditional SIEM (Security Information and Event Management) solutions?

Legacy SIEM solutions depend on static, rule-based approaches that lead to excessive false positives, increased costs, and delayed detection and response. Our REVEAL platform is fully cloud-native and AI-driven, utilizing advanced machine learning, behavioral analytics, and dynamic risk scoring to detect and respond to threats in real time. Unlike traditional platforms, REVEAL continuously adapts to evolving threats and integrates across on-premises, cloud, and hybrid environments for comprehensive security coverage. Recognized as the ‘Most Visionary’ SIEM solution in Gartner’s Magic Quadrant for three consecutive years, REVEAL redefines AI-driven SIEM with unmatched precision, speed, and visibility. Furthermore, SIEMs struggle with a data overload problem. They are too expensive to ingest everything needed for complete visibility and even if they do it just adds to the false positive problem. Gurucul understands this problem and it’s why we have a native and AI-driven Data Pipeline Management solution that filters non-critical data to low-cost storage, saving money, while retaining the ability to run federated search across all data. Analytics systems are a “garbage in, garbage out” situation. If the data coming in is bloated, unnecessary or incomplete then the output will not be accurate, actionable or ultimately trusted.

Can you explain how machine learning and behavioral analytics are used to detect threats in real time?

Our platform leverages over 4,000 machine learning models to continuously analyze all relevant datasets and identify anomalies and suspicious behaviors in real time. Unlike legacy security systems that rely on static rules, REVEAL uncovers threats as they emerge. The platform also utilizes User and Entity Behavior Analytics (UEBA) to establish baselines of normal user and entity behavior, detecting deviations that could indicate insider threats, compromised accounts, or malicious activity. This behavior is further contextualized by a big data engine that correlates, enriches and links security, network, IT, IoT, cloud, identity, business application data and both internal and external sourced threat intelligence. This informs a dynamic risk scoring engine that assigns real-time risk scores that help prioritize responses to critical threats. Together, these capabilities provide a comprehensive, AI-driven approach to real-time threat detection and response that set REVEAL apart from conventional security solutions.

How does Gurucul’s AI-driven approach help reduce false positives compared to conventional cybersecurity systems?

The REVEAL platform reduces false positives by leveraging AI-driven contextual analysis, behavioral insights, and machine learning to distinguish legitimate user activity from actual threats. Unlike conventional solutions, REVEAL refines its detection capabilities over time, improving accuracy while minimizing noise. Its UEBA detects deviations from baseline activity with high accuracy, allowing security teams to focus on legitimate security risks rather than being overwhelmed by false alarms. While Machine Learning is a foundational aspect, generative and agentic AI play a significant role in further appending context in natural language to help analysts understand exactly what is happening around an alert and even automate the response to said alerts.

What role does adversarial AI play in modern cybersecurity threats, and how does Gurucul combat these evolving risks?

First all we’re already seeing adversarial AI being applied to the lowest hanging fruit, the human vector and identity-based threats. This is why behavioral, and identity analytics are critical to being able to identify anomalous behaviors, put them into context and predict malicious behavior before it proliferates further. Furthermore, adversarial AI is the nail in the coffin for signature-based detection methods. Adversaries are using AI to evade these TTP defined detection rules, but again they can’t evade the behavioral based detections in the same way. SOC teams are not resourced adequately to continue to write rules to keep pace and will require a modern approach to threat detection, investigation and response. Behavior and context are the key ingredients.  Finally, platforms like REVEAL depend on a continuous feedback loop and we’re constantly applying AI to help us refine our detection models, recommend new models and inform new threat intelligence our entire ecosystem of customers can benefit from.

How does Gurucul’s risk-based scoring system improve security teams’ ability to prioritize threats?

Our platform’s dynamic risk scoring system assigns real-time risk scores to users, entities, and actions based on observed behaviors and contextual insights. This enables security teams to prioritize critical threats, reducing response times and optimizing resources. By quantifying risk on a 0–100 scale, REVEAL ensures that organizations focus on the most pressing incidents rather than being overwhelmed by low-priority alerts. With a unified risk score spanning all enterprise data sources, security teams gain greater visibility and control, leading to faster, more informed decision-making.

In an age of increasing data breaches, how can AI-driven security solutions help organizations prevent insider threats?

Insider threats are an especially challenging security risk due to their subtle nature and the access that employees possess. REVEAL’s UEBA detects deviations from established behavioral baselines, identifying risky activities such as unauthorized data access, unusual login times, and privilege misuse. Dynamic risk scoring also continuously assesses behaviors in real time, assigning risk levels to prioritize the most pressing insider risks. These AI-driven capabilities enable security teams to proactively detect and mitigate insider threats before they escalate into breaches. Given the predictive nature of behavioral analytics Insider Risk Management is race against the clock. Insider Risk Management teams need to be able to respond and collaborate quickly, with privacy top-of-mind. Context again is critical here and appending behavioral deviations with context from identity systems, HR applications and all other relevant data sources gives these teams the ammunition to quickly build and defend a case of evidence so the business can respond and remediate before data exfiltration occurs.

How does Gurucul’s identity analytics solution enhance security compared to traditional IAM (identity and access management) tools?

Traditional IAM solutions focus on access control and authentication but lack the intelligence and visibility to detect compromised accounts or privilege abuse in real time. REVEAL goes beyond these limitations by leveraging AI-powered behavioral analytics to continuously assess user risk, dynamically adjust risk scores, and enforce adaptive access entitlements, minimizing misuse and illegitimate privileges. By integrating with existing IAM frameworks and enforcing least-privilege access, our solution enhances identity security and reduces the attack surface. The problem with IAM governance is identity system sprawl and the lack of interconnectedness between different identity systems. Gurucul gives teams a 360° view of their identity risks across all identity infrastructure. Now they can stop rubber stamping access but rather take risk-oriented approach to access policies. Furthermore, they can expedite the compliance aspect of IAM and demonstrate a continuous monitoring and fully holistic approach to access controls across the organization.

What are the key cybersecurity threats you foresee in the next five years, and how can AI help mitigate them?

Identity-based threats will continue to proliferate, because they have worked. Adversaries are going to double-down on gaining access by logging in either via compromising insiders or attacking identity infrastructure. Naturally insider threats will continue to be a key risk vector for many businesses, especially as shadow IT continues. Whether malicious or negligent, companies will increasingly need visibility into insider risk. Furthermore, AI will accelerate the variations of conventional TTPs, because adversaries know that is how they will be able to evade detections by doing so and it will be low cost for them to creative adaptive tactics, technics and protocols. Hence again why focusing on behavior in context and having detection systems capable of adapting just as fast will be crucial for the foreseeable future.

Thank you for the great interview, readers who wish to learn more should visit Gurucul. 

[sinnamorolly]

random freak hcs for onyyy<3 (18+, nsfw links)

rbgs much appreciated>~<!

def the type to pause mid stroke to swipe his thumb thru the cream at the base of his dick to feed it to you

fs loves breath play. he likes grabbing ur neck, but he lovesss when you choke on his dick instead. likes watching you struggle to swallow it all while you get lightheaded

makes outtttt with your pussy. and i mean he’s a EATER. thigh bites and kisses before he sucks each lip. holds u open nd his tongue doesn’t leave ur poor clit alone for at least half an hour (he likes making u squirt on his face).

this mans physique?😫his dick is already a solid 8.5in, then its fat ontop of that?????!? it took so much prep the first time he tried fucking you

and the motion match the ocean ok! he got that hip roll with the deep grind right against your cervix typa stroke. only picks up his pace and starts fucking u up when you’re close so he can fuck you thru it and give u another one

oh and donttt piss him off bc you will not be heard from for a solid 4 hours and newly in need of several maintenance appointments. he will absolutely fuck out anything yall are feeling and will make you tell him whats wrong while hes in it

if u ever let him nut inside theres just no going back. the image of your pretty pussy dripping his cum is already permanently engraved into his brain

after he’s fucked you a few times, he dont gaf abt them “too bigg” whines no more, youre just stuck taking it. in fact he usually makes a point to grab your hips and press that last inch in. and i dont suggest pushing at them abs too often, he will jus go buy some handcuffs

his favorite position is definitely upright doggy. he can watch your ass jiggle and get deep up inside you all while still being able to reach everything. he be pulling your hair so he can see your crumpled face before giving u some sloppy ass kisses mm mm mm

loves smoking w you beforee

LOVES the noises you make he could literally cum from the sound alone

how he talks to you*.<3

“mm right…..there hm?”

“ you so pretty like this baby yk that?”

“uh un take that….mhmm there you go”

“move them fuckin hands im not finna tell you again”

“fuck princess thats how you comin?”

“yeah das all you needed huh?”

“so fuckin messy”

“ mhm you gon give me another one ma?”

“who all this for baby hm? use them pretty lips n tell me”

“ yeah you can”

his playlist*.<3

Poison - Brent Faiyaz

Power Trip - J. Cole

Stay Ready - Jhene Aiko

305 - Jordan Adetunji

It Won’t Stop - Sevyn Streeter

ALL MINE - Brent Faiyaz

Coming Down - The Weeknd

Kiss It Better - Rihanna

Damage - H.E.R.

Sorrows - Bryson Tiller

Try Me - The Weeknd

N o C h i l l - PARTYNEXTDOOR

Don’t - Bryson Tiller

[ask-the-marimozoro]

Do you ever like or have a tiny bit crush on girls, zoro? You're always stoic till sanji showed up. What's up with that?

“WHY WOULD YOU SAY THAT?!”

[brofightiscancelled]

the anan movie Q&As are really interesting to me, so i wanted to attempt my own translations! 🙇‍♂️

[bloggingboutburgers]

Tumblr keeps showing me your comics for some reason recently and at first I didn't think much of them, just that it was cool to see an aro/ace person's perspective, but holy shit after seeing a bunch in a row it's clear that you really REALLY love to paint people who experience sexual attraction in a negative light. Especially when you mention how everyone who does has "ulterior motives" when making friends. You realize that's not the case at all right? That not everyone has a nefarious plan to fuck everyone they attempt to get to know? It comes off so nasty and only perpetuates negative stereotypes when the reality is that most people just generally just enjoy making human connections.

Hey! First off, sorry for the late reply, been traveling around so I haven't been the best at keeping up...

Second, uh, no, I don't "love" to paint people who experience sexual attraction in a negative light. If I did automatically, then I practically wouldn't have any friends. If that's how it came across then I've done my job of drawing my perspective badly, but no, that's not my position on things at all.

Obviously I know that not everyone has the ulterior motives of fucking a person they attempt to get to know. I know a lot of people just enjoy making human connections and that's great, that's all I ever look for in life myself really. What I do have beef with is when people push the implication that sex (or romance for that matter) are the only "human connections" worth having when there's so many kinds of them to go around, and when that idea is backed with kinda hurtful (from my perspective) vocabulary that are just part of common accepted lingo, like "friendzoning" or "more than friends" (like being friends is a bad thing or something automatically inferior). I know that they don't mean much to people who experience positive relationships of romantic or sexual nature, but when being friends is the best I know, it always has me squint to see stuff worded that way. So I nitpick. But on specific topics or approaches, not on everyone who experiences sexual attraction. That was never the message.

The one thing I'll concede is that my knee-jerk reaction of feeling a bit of heartbreak and betrayal when romantically confessed to, as shown here, is arguably a bit unfair, and projecting, but the unfairness and projection go both ways in such a situation. It's just the tragedy of incompatibility between certain people depending on their walks of life sometimes. It's no one's fault really, and I never meant for it to sound that way. All I want to do is, like you said, show an aro/ace person's perspective in a world widely dominated by allosexual and alloromantic views.

[shotmrmiller]

That SD!Simon who took a one night stand would have me accepting a babysitting job across the city. The that requires Reader to stay with the kids for a week cause the parents need the vacation. Maybe, possibly meeting someone from that side and 👀

i hear that LOUD AND CLEAR. LIKE GLASS.

listen i ooooooh i would be reaching out to my toxic but great lay ex like pull up neoooowww

gotta have him being a big gross grump who takes care of his own kid now. stop knocking on our door asking how much formula she takes read the can brother

naw i'd be hella moving on. catch me firmly setting lines he cannot and will not cross. no i don't give a damn how tired you are, get your baby and go back to your own flat. no i cannot watch your child mr. riley im gonna have a guy over and you will not interrupt my date with him.

girllll (gn) i'd be howling like a cat in heat during sex too js.

[longing-for-rain]

So we can dismiss this comic as “out of character” but every little scrap of “new content” Avatar Studios pumps out to retcon everything about this atrocious relationship that fans have complained about is fine?

These people are hilarious, you can’t hide behind canon if you’re going to blatantly ignore everything that makes your pookie bear look bad.

[itsyaboinixo]

a very annoying aspects of even well meaning Americans is that they too think the United States is the center of the world. "Israel is bombing rafah while we are distracted by the Superbowl" "Israel is invading rafah while everyone focuses on the Met Gala".

the rest of the world is not planning military operations around our cultural events. I even forgot about the Superbowl until a week before it happened, and I didn't know the Met Gala was going on until the day of. And I live in this country. if I forget about this stuff, foreign governments planning an invasion weeks in advance, responding to localized political developments such as ceasefire talks, aren't thinking about non-political events going on in our country.

and I say this as someone who wishes things were different: but what would the difference be? do you think if the Met Gala wasn't going on that people would be out into the streets demanding a ceasefire? if the Superbowl had not been occuring, do you think our government would finally listen to our calls & emails if a slightly stronger campaign was going on that day?

this is more to call out of Americans who are still making everything about them. other country's militaries are not thinking about American civilian opinion when deciding military actions. they may consider US government opinion, but in this case it's well established our government doesn't care about public opinion. individuals maybe different, but as a whole we are already complacent.

please quit thinking the world revolves around the United States as it is negatively & inaccurately affecting your analysis & worldview, distorting where the focus should be: on the civilians facing violence & our government's culpability.

[scrawnytreedemon]

Just a girl and her hog, trying to save their dying world.

[an-albino-pinetree]

A

I am incredibly late to this @endomentendo

But Tree tea time! An art collab!!

She’s- still processing, but she’ll get there-

[glassiskies]

aziraphale i love you

[tamarahtalkstv]

In Honor Of Her Birthday, I Wanted To Share My Favorite Annie Leonhart Ships!

As You Can Probably See, I Really Like Her Sapphic Ones The Most.

Pan And Ace Queen She Is.

I Don’t Know Why, But She Goes So Fucking Hard With Every Woman In This Series.

Ships Aside, Happy Birthday Ann-chan!

🎂💎

[cuppajj]

Haii!! I have a foreal question today, Do you have an Artfight? Id LOVE to attack you :3

Here ya go!

[japo-orbo]

Slowly, due to my work, the boxes dedicated to the great GW board games continue. This is the turn of advanced spacecrusade.I tried to make the style of the "pop" board in my box, as well as the colors chosen.I only used the original miniatures of the game which are indeed terribly dated. But in the end this is what I managed to get out of it. Not my best box but still full of Retro feeling. Enjoy!

[marcobodtlives]

Horse Riding Shenanigans

(Glass Door Shenanigans)

[spockandawe]

It's been a hot minute since I updated the blog on what I was reading! First, i absolutely DEVOURED You Yao ('are you ok') after stalling out on it a few years back, and I'm going to write up a longer post on that one soon, because the author is SO fucking funny and deserves way more widespread attention, and I've never seen an author go so ham on the concept of transmigration. Then I immediately went looking for more Qi Ying Jun books, because seriously, I'll follow this author anywhere she leads at this point. I'm in the middle of Cheng He Ti Tong ('this is ridiculous'), but had to take a break because it was soooo good and i was overexcited by the plot twists and needed a breather.

Spontaneously, I started 'Is My Attacker A Ghost?', because I'd read a manhwa that was nominally about ghost molestation, and then it wasn't about ghost molestation, and that left me with sad blue balls. This isn't QUITE that either, but i do like it a lot! It's a modern school bullying story, featuring ghosts (shocking, i know). The bullying is pretty rough at first, and the ghost doesn't get THAT handsy before they start communicating better, but it is definitely a dark book. It wouldn't usually be my wheelhouse, but the atmosphere of the ghosty bits and the gory scenes really caught me!

It's extreme, and can sometimes skew a bit silly in how extreme it gets, but here's one of the few screenshots i took along the way

But it balances the horror with some lively energy and it's a lot of fun!

Basically, I started it yesterday and it's going down REAL easy. I fully expect to finish it tonight and get back to one of the other four books I'm in the middle of. But i wanted to give this one some love before i finished blowing through it!