Integrating With Cisco XDR at Black Hat Europe

Investigating indicators of compromise (IOCs) requires a unified view of security data. See how we integrated Cisco XDR with third-party tools and open-source models at Black Hat Europe.

Black Hat Europe: Enhancing Security Operations With Cisco XDR and Foundation-sec-8b-Instruct LLM

Manual triage often slows down incident response. Learn how we integrated an 8-billion parameter security LLM into Cisco XDR to summarize alerts and trace attack paths in real time.

Black Hat Europe 2025: A Decade of Cisco Security Cloud Innovation

Building a secure network for thousands of cybersecurity experts in just three days requires intense collaboration. Discover the hardware, software, and engineering behind the Black Hat Europe NOC.

Black Hat Europe 2025: Firepower IDS Flags Unwanted P2P on Rented Gear

Rented hardware often carries digital baggage from previous users. Discover how our NOC team used JA3 fingerprints and Cisco XDR to track down unauthorized P2P syncing in London.

Securing DNS With Secure Access at Black Hat Europe

For a decade, Cisco has secured Black Hat events with DNS security. Learn how the evolution to Cisco Secure Access provided visibility into 66 million queries and 6,000 unique apps in London.

Lessons Learned from Securing the World’s Largest Cyber Events

Announcing the launch of the Cisco Event SOCs website and the release of our comprehensive Reference Architecture & Operations Guide.

Introducing Intent-Based Policy Management for Cisco Hybrid Mesh Firewall

Hybrid Mesh Firewall introduces intent-based policy management across multi-vendor firewalls through Cisco Security Cloud Control with Mesh Policy Engine.

Engaging Cisco Talos Incident Response is just the beginning

Cisco Talos Incident Response Retainer provides expert, proactive, and reactive cybersecurity support to quickly contain threats and strengthen defenses.

Three Benefits of Segmentation

The successful implementation of segmentation enables organizations to contain breaches, protect high-value assets, and meet compliance requirements.

Why your organization needs a Cisco Talos Incident Response Retainer

Every day, new ransomware and data breaches dominate the headlines, reminding us that it’s a matter of when, not if, your organization may be next. Having a well-prepared response plan and a team of forensic professionals ready to act at a moment’s notice can mean a world of difference between swift incident recovery or a […]

Key Challenges that Impede Segmentation Progress

The 2025 Cisco Segmentation Report shows that complexity, visibility, and context remain the main challenges for successful segmentation implementations.

A Newbie’s Perspective: From Curiosity to Confidence, My SOC Story

A new analyst shares their Cisco Live SOC experience, covering quick onboarding, using Cisco XDR and Endace for incident investigation, and building confidence in threat response.

Have You Seen My Domain Controller?

Windows clients expose Active Directory DNS queries on public Wi-Fi, risking OSINT and credential leaks. Learn from Cisco Live SOC observations how to protect clients with VPNs .

Splunk in Action: From SPL to PCAP

Learn how Cisco Live SOC uses Splunk SPL and Endace PCAP to investigate exposed HTTP authentication and Kerberos activity, securing sensitive data on public Wi-Fi networks.

Cisco Live Melbourne 2025 SOC

Cisco Security and Splunk protected Cisco Live Melbourne 2025 in the Security Operations Centre. Learn about the latest innovations for the SOC of the Future.

Cisco Live Melbourne Case Study: Cisco Live TMC Experience and DDoS

Explore a Cisco TME's experience in the Cisco Live SOC, detailing efficient onboarding, incident escalation, and a real-world DDoS attack investigation and response.

The Segmentation Cycle: A Practical Approach to Network Security

The segmentation journey starts with visibility, goes through identity context, policy and enforcement, ultimately returning to enhanced visibility.

Segmentation Remains a Foundational Security Concept

The 2025 Cisco Segmentation Report shows that the concept’s adaptability makes it a foundational cornerstone for modern enterprise security strategies.

GovWare 2025 Security Operations Centre

Cisco Security and Splunk secured the GovWare 2025 network in the Security Operations Centre. Learn about the latest innovations for the SOC of the Future.

From Detection to Deep Dive: Splunk Attack Analyzer and Endace for GovWare 2025 Security

At GovWare 2025, the team leveraged Splunk Attack Analyzer's API to connect to Endace.

Unmasking Attacks With Cisco XDR at the GovWare SOC

During GovWare, Cisco XDR detected 39 incidents. The SOC team conducted analysis and response actions, and reported critical incidents to the GovWare NOC.

Splunk SOAR in Action at the GovWare: Zero-Touch Clear Text Password Response

At GovWare 2025, the SOC team combined ES with Splunk SOAR to fully automate and track the incident response process.

GovWare Captive Portal: (Splash Page)

Cisco provided a splash page for GovWare 2025, a click-through captive portal. Learn how the team did it.

A Glimpse Into Cisco Mobile Infrastructure Security Developments

See how Cisco is helping mobile operators improve visibility, protect traffic at high speed, and keep security consistent from core to edge.

Seeing Inside the Vortex: Detecting Living off the Land Techniques

Networking infrastructure is an often-overlooked threat surface being targeted by sophisticated threat actors. Learn more about this topic.

Empower AI Innovation: On-Demand AI Data Center Access With Cisco SD-WAN

AI has transformed everyday experiences—from your phone instantly translating a foreign language to your smart assistant finding the fastest route home. Just as these devices connect you to the world in a split second, businesses now require on-demand, high-performance access to a rapidly expanding global AI ecosystem. This seamless, real-time connectivity is becoming the new […]

SE Labs Names Cisco Secure Firewall Best Enterprise NGFW 2025

Cisco Secure Firewall wins SE Labs’ 2025 Best NGFW award — the first ever to earn dual AAA ratings for both protection and performance. Zero breaches, Zero compromises.

SSE That Thinks in Identity and Adapts Access

Identity doesn’t stay still. Trust shifts. Behavior fluctuates. Posture changes. Cisco Secure Access leverages rich data from identity, behaviors, and devices.

2025 Cisco Segmentation Report Sheds Light on Evolving Technology

A new report from Cisco shows that segmentation is a foundational security technology, but few are fully implementing both macro- and micro-segmentation today.

Common Threat Themes: Defending Against Lateral Movement (Part 1)

Discover why lateral movement is a key tactic in cyber breaches and how defenders can strengthen security by focusing on this critical threat vector.

Defining a Standard Taxonomy for Segmentation

We need a standardized taxonomy so organizations can evaluate, implement and manage segmentation projects most effectively.

Racing Against Threats: How Cisco Security Powers McLaren’s F1 Prowess

Discover how Cisco helps McLaren protect data and stay fast with world-class cybersecurity across every track and continent.

Canadian Bacon Cybersecurity: SharePoint Vulnerabilities and Vulnerabilities in General

Learn about the Microsoft SharePoint vulnerability and which steps you can take to mitigate the effects of this — and other — vulnerabilities.

Zero Trust in the Era of Agentic AI

AI agents use the same networking infrastructure as users and apps. So security solutions like zero trust should evolve to protect agentic AI communications.

Conference Hopping: Training Attendee Scanning Def Con

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.

Driving Cisco XDR Integration With Third-Party Partners at Black Hat

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.

Cisco Secure Firewall: SnortML at Black Hat USA 2025

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.

Black Hat Investigation: Attempted Exploitation of Registration Server

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.

The Value of PCAP in Firewall Investigations

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.

Closing the Backdoor in TACACS+: Why Full-Session Encryption Matters More Than Ever

Attackers exploited weak TACACS+ encryption to steal credentials and evade detection. Learn how Cisco ISE with TLS 1.3 and Duo MFA closes these backdoors.

Get Ahead of the HIPAA Security Rule Update With Secure Workload

Cisco Secure Workload is foundational for organizations seeking to implement an effective microsegmentation strategy. It empowers orgs to safeguard assets.

Fragmented SSE Is a Risk You Can’t Afford

Cisco Secure Access solves the problem of point product patchworks, offering a unified architecture that moves with the user, not just the network.

Findings Report From the SOC at RSAC™ 2025 Conference

Cisco Security and Splunk protected RSAC™ 2025 Conference in the Security Operations Center. Learn about the latest innovations for the SOC of the Future.

Cisco and KDDI Partner to Deliver Japan’s First Fully Managed SASE Solution

Explore how service providers are enabling faster, scalable SASE adoption with cloud-native security and networking solutions.

Universal ZTNA from Cisco Earns Coveted SE Labs AAA Rating

Combining the power of Duo's Identity Management and Cisco's Secure Access and Identity Intelligence protects against stolen credentials and phishing attacks.

Cisco Catalyst 8300 Excels in NetSecOPEN NGFW SD-WAN Security Tests

Cisco Catalyst 8300 earns NetSecOPEN certification for exceptional real-world NGFW and SD-WAN performance under modern enterprise conditions.

Cisco Live San Diego Case Study: Malware Upatre! (Encrypted Visibility Engine Event)

Cisco Security and Splunk protected Cisco Live San Diego 2025 in the Security Operations Center. Learn about the latest innovations for the SOC of the Future.

Splunk in Action at the Cisco Live San Diego SOC

Cisco Security and Splunk protected Cisco Live San Diego 2025 in the Security Operations Center. Learn about the latest innovations for the SOC of the Future.

Using AI to Battle Phishing Campaigns

Cisco Security and Splunk protected Cisco Live San Diego 2025 in the Security Operations Center. Learn about the latest innovations for the SOC of the Future.

Building an XDR Integration With Splunk Attack Analyzer

Cisco XDR is an infinitely extensible platform for security integrations. Like the maturing SOCs of our customers, the event SOC team at Cisco Live San Diego 2025 built custom integrations to meet our needs. You can build your own integrations using the community resources announced at Cisco Live. It was an honor to work with […]

Cisco Live San Diego Case Study: Hunting Cleartext Passwords in HTTP POST Requests

Cisco Security and Splunk protected Cisco Live San Diego 2025 in the Security Operations Center. Learn about the latest innovations for the SOC of the Future. 

Redefining Zero Trust in the Age of AI Agents and Agentic Workflows

AI-powered threats demand intent-based security. Cisco's Semantic Inspection Proxy redefines zero trust by analyzing agent behavior, ensuring semantic verification.

Simplifying Decryption With Cisco’s Secure Firewall 7.7

Simplify decryption with Cisco Secure Firewall 7.7! Intelligent bypass, enhanced wizard & more for optimized security & performance.

Making Agentic AI Work in the Real World

Cisco is extending the principles of zero trust to Agentic AI. Cisco's Universal Zero Trust Network architecture gives you the tools you need.

Streamline Regulation Mandates With NIST CSF and Secure Workload

Cisco Secure Workload serves as a foundational solution for organizations seeking to implement an effective microsegmentation strategy.

Introducing Secure Access – DNS Defense

Cisco Secure Access - DNS Defense is a seamless pathway to our Universal ZTNA solution. Learn how it works in the blog.

Black Hat Asia 2025 NOC: Innovation in SOC

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future.

Black Hat Asia 2025: Innovation in the SOC

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future.

Mobile World Congress 2025: SOC in the Network Operations Center

Cisco is the sole supplier of network services to Mobile World Congress, expanding into security and observability, with Splunk.

Network Visibility Module and Zeek Detections in Secure Network Analytics

Secure Network Analytics version 7.5.2 has been released, offering exciting new features such as the Network Visibility Module (NVM) and Zeek detections.