Security – Cisco Blog

Redefining Security for the Agentic Era

The agentic era is here. As AI agents act autonomously at machine speed, learn why security must evolve with intent-aware controls to make autonomous systems safe, accountable, and reliable.

Security – Cisco Blog

SASE for the AI Era: Driving Secure, Distributed, and Optimized AI

Learn how Cisco SASE enables secure, predictable, and scalable AI operations by unifying performance and protection for distributed, agentic AI workflows.

Security – Cisco Blog

Integrating With Cisco XDR at Black Hat Europe

Investigating indicators of compromise (IOCs) requires a unified view of security data. See how we integrated Cisco XDR with third-party tools and open-source models at Black Hat Europe.

Security – Cisco Blog

Black Hat Europe: Enhancing Security Operations With Cisco XDR and Foundation-sec-8b-Instruct LLM

Manual triage often slows down incident response. Learn how we integrated an 8-billion parameter security LLM into Cisco XDR to summarize alerts and trace attack paths in real time.

Security – Cisco Blog

Black Hat Europe 2025: A Decade of Cisco Security Cloud Innovation

Building a secure network for thousands of cybersecurity experts in just three days requires intense collaboration. Discover the hardware, software, and engineering behind the Black Hat Europe NOC.

Security – Cisco Blog

Black Hat Europe 2025: Firepower IDS Flags Unwanted P2P on Rented Gear

Rented hardware often carries digital baggage from previous users. Discover how our NOC team used JA3 fingerprints and Cisco XDR to track down unauthorized P2P syncing in London.

Security – Cisco Blog

Securing DNS With Secure Access at Black Hat Europe

For a decade, Cisco has secured Black Hat events with DNS security. Learn how the evolution to Cisco Secure Access provided visibility into 66 million queries and 6,000 unique apps in London.

Security – Cisco Blog

Lessons Learned from Securing the World’s Largest Cyber Events

Announcing the launch of the Cisco Event SOCs website and the release of our comprehensive Reference Architecture & Operations Guide.

Security – Cisco Blog

Facing the Quantum Threat: Cisco’s Strategic Approach to PQC

Quantum threats are closer than you think. Explore Cisco’s strategic approach to Post-Quantum Cryptography (PQC) and how to protect against HNDL risks now.

Security – Cisco Blog

Elevating Data Security: New DLP Enhancements in Cisco Secure Access

Extend your ability to safeguard sensitive information, achieve regulatory compliance, and mitigate risk with endpoint data loss prevention (DLP) and email DLP.

Security – Cisco Blog

A Newbie’s Perspective: From Curiosity to Confidence, My SOC Story

A new analyst shares their Cisco Live SOC experience, covering quick onboarding, using Cisco XDR and Endace for incident investigation, and building confidence in threat response.

Security – Cisco Blog

Have You Seen My Domain Controller?

Windows clients expose Active Directory DNS queries on public Wi-Fi, risking OSINT and credential leaks. Learn from Cisco Live SOC observations how to protect clients with VPNs .

Security – Cisco Blog

Splunk in Action: From SPL to PCAP

Learn how Cisco Live SOC uses Splunk SPL and Endace PCAP to investigate exposed HTTP authentication and Kerberos activity, securing sensitive data on public Wi-Fi networks.

Security – Cisco Blog

Cisco Live Melbourne 2025 SOC

Cisco Security and Splunk protected Cisco Live Melbourne 2025 in the Security Operations Centre. Learn about the latest innovations for the SOC of the Future.

Security – Cisco Blog

Cisco Live Melbourne Case Study: Cisco Live TMC Experience and DDoS

Explore a Cisco TME's experience in the Cisco Live SOC, detailing efficient onboarding, incident escalation, and a real-world DDoS attack investigation and response.

Security – Cisco Blog

GovWare 2025 Security Operations Centre

Cisco Security and Splunk secured the GovWare 2025 network in the Security Operations Centre. Learn about the latest innovations for the SOC of the Future.

Security – Cisco Blog

From Detection to Deep Dive: Splunk Attack Analyzer and Endace for GovWare 2025 Security

At GovWare 2025, the team leveraged Splunk Attack Analyzer's API to connect to Endace.

Security – Cisco Blog

Unmasking Attacks With Cisco XDR at the GovWare SOC

During GovWare, Cisco XDR detected 39 incidents. The SOC team conducted analysis and response actions, and reported critical incidents to the GovWare NOC.

Security – Cisco Blog

Splunk SOAR in Action at the GovWare: Zero-Touch Clear Text Password Response

At GovWare 2025, the SOC team combined ES with Splunk SOAR to fully automate and track the incident response process.

Security – Cisco Blog

GovWare Captive Portal: (Splash Page)

Cisco provided a splash page for GovWare 2025, a click-through captive portal. Learn how the team did it.

Security – Cisco Blog

SSE That Thinks in Identity and Adapts Access

Identity doesn’t stay still. Trust shifts. Behavior fluctuates. Posture changes. Cisco Secure Access leverages rich data from identity, behaviors, and devices.

Security – Cisco Blog

The 80/20 Rule Doesn’t Apply to Security: How Cisco SASE Bridges the Gap

Today's dynamic environments demand a security strategy that covers 100% of your digital footprint, 100% of the time. SASE architectures have emerged as a strategic response.

Security – Cisco Blog

Conference Hopping: Training Attendee Scanning Def Con

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.

Security – Cisco Blog

Driving Cisco XDR Integration With Third-Party Partners at Black Hat

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.

Security – Cisco Blog

Cisco Secure Firewall: SnortML at Black Hat USA 2025

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.

Security – Cisco Blog

Black Hat Investigation: Attempted Exploitation of Registration Server

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.

Security – Cisco Blog

The Value of PCAP in Firewall Investigations

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.

Security – Cisco Blog

Fragmented SSE Is a Risk You Can’t Afford

Cisco Secure Access solves the problem of point product patchworks, offering a unified architecture that moves with the user, not just the network.

Security – Cisco Blog

Cisco Bolsters Security for Government With New FedRAMP Authorizations

Cisco is proud to announce three new FedRAMP-authorized cloud security solutions, purpose-built for federal, state, and local agencies.

Security – Cisco Blog

Findings Report From the SOC at RSAC™ 2025 Conference

Cisco Security and Splunk protected RSAC™ 2025 Conference in the Security Operations Center. Learn about the latest innovations for the SOC of the Future.

Security – Cisco Blog

Cisco and KDDI Partner to Deliver Japan’s First Fully Managed SASE Solution

Explore how service providers are enabling faster, scalable SASE adoption with cloud-native security and networking solutions.

Security – Cisco Blog

Universal ZTNA from Cisco Earns Coveted SE Labs AAA Rating

Combining the power of Duo's Identity Management and Cisco's Secure Access and Identity Intelligence protects against stolen credentials and phishing attacks.

Security – Cisco Blog

Secure Your Business With Cisco Hybrid Mesh Firewall Solutions

Cisco Hybrid Mesh Firewall provides advanced security for hybrid cloud environments, remote workforces, and AI-powered innovations.

Security – Cisco Blog

Cisco Live San Diego Case Study: Malware Upatre! (Encrypted Visibility Engine Event)

Cisco Security and Splunk protected Cisco Live San Diego 2025 in the Security Operations Center. Learn about the latest innovations for the SOC of the Future.

Security – Cisco Blog

Splunk in Action at the Cisco Live San Diego SOC

Cisco Security and Splunk protected Cisco Live San Diego 2025 in the Security Operations Center. Learn about the latest innovations for the SOC of the Future.

Security – Cisco Blog

Using AI to Battle Phishing Campaigns

Cisco Security and Splunk protected Cisco Live San Diego 2025 in the Security Operations Center. Learn about the latest innovations for the SOC of the Future.

Security – Cisco Blog

Building an XDR Integration With Splunk Attack Analyzer

Cisco XDR is an infinitely extensible platform for security integrations. Like the maturing SOCs of our customers, the event SOC team at Cisco Live San Diego 2025 built custom integrations to meet our needs. You can build your own integrations using the community resources announced at Cisco Live. It was an honor to work with […]

Security – Cisco Blog

Cisco Live San Diego Case Study: Hunting Cleartext Passwords in HTTP POST Requests

Cisco Security and Splunk protected Cisco Live San Diego 2025 in the Security Operations Center. Learn about the latest innovations for the SOC of the Future. 

Security – Cisco Blog

Redefining Zero Trust in the Age of AI Agents and Agentic Workflows

AI-powered threats demand intent-based security. Cisco's Semantic Inspection Proxy redefines zero trust by analyzing agent behavior, ensuring semantic verification.

Security – Cisco Blog

Future-Proof Your Network With Cisco’s Simpler, Smarter, Safer SD-WAN

Cisco's latest updates to our SD-WAN solutions showcase our commitment to innovation. These advancements empower businesses and deliver secure connectivity.

Security – Cisco Blog

Making Agentic AI Work in the Real World

Cisco is extending the principles of zero trust to Agentic AI. Cisco's Universal Zero Trust Network architecture gives you the tools you need.

Security – Cisco Blog

Introducing Secure Access – DNS Defense

Cisco Secure Access - DNS Defense is a seamless pathway to our Universal ZTNA solution. Learn how it works in the blog.

Security – Cisco Blog

Simplifying Zero Trust: How Cisco Security Suites Drive Value

Discover how Cisco Security Suites are helping organizations achieve zero trust while realizing significant cost savings, improved productivity, and a 110% ROI.

Security – Cisco Blog

Cloud-Delivered Security Landing in China

Announcing Cisco Secure Access China, Operated by Digital China Cloud Regulatory ambiguity. Compliance Risk. Cybersecurity threats. These daily realities are especially challenging for multinational… Read more on Cisco Blogs

Security – Cisco Blog

Black Hat Asia 2025 NOC: Innovation in SOC

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future.

Security – Cisco Blog

Black Hat Asia 2025: Innovation in the SOC

Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future.

Security – Cisco Blog

Redefining Security Management in a Hyperconnected World

Cisco is bringing Secure Workload, Secure Access, and AI Defense into Security Cloud control, enhancing its capabilities and providing comprehensive management.

Security – Cisco Blog

Meet the Cybersecurity Defender of 2025 for EMEA

Cisco's 2025 EMEA Cybersecurity Defender of the Year award goes to the team at SAP Enterprise Cloud Services, who raised the bar for overall security posture.

Security – Cisco Blog

Fusing Security Into the Network Fabric: From Hybrid Mesh Firewalls to Universal ZTNA

In the changing landscape of network security, the combination of Universal Zero Trust Network Access and Hybrid Mesh Firewalls offers a powerful defense.

Security – Cisco Blog

Simplifying Zero Trust Security for the Modern Workplace

Cisco’s User Protection Suite now includes Identity Services Engine (ISE), enabling organizations to achieve zero trust for the workplace.

Security – Cisco Blog

Reducing Help Desk Tickets With Cisco’s User Protection Suite

Learn how Cisco’s User Protection Suite tools enable users to quickly and securely get to work.

Security – Cisco Blog

You’ve Heard the Security Service Edge (SSE) Story Before, but We Re-Wrote It!

Tech components like MASQUE, QUIC and VPP allow Cisco to overcome the limitations of last-gen ZTNA and SSE solutions. Learn how Cisco is rewriting the ZTA story.

Security – Cisco Blog

Layered Protection for RADIUS With Cisco

Learn how Cisco’s unique integrations protect RADIUS authentications when connecting to the network.

Security – Cisco Blog

Seamless Secure Work on a Plane

Learn how Cisco’s User Protection Suite provides fast and secure connection to applications, even while traveling.

Security – Cisco Blog

Protect Against Adversary-in-the-Middle with Cisco’s User Protection Suite

Learn about how the User Protection Suite uses secure protocols to stop Adversary-in-the-Middle (AiTM) attacks.

Security – Cisco Blog

How to Monitor Network Traffic: Findings from the Cisco Cyber Threat Trends Report

The Cisco Cyber Threat Trends report examines malicious domains for trends and patterns. See what the data tells us about the threat landscape.

Security – Cisco Blog

Bolster SaaS Security Posture Management with Zero Trust Architecture

Cisco and AppOmni have teamed to extend zero trust principles to secure SaaS applications and data with a closed loop zero trust architecture.

Security – Cisco Blog

Cisco Secure Access Wins Global Security Service Edge Customer Value Leadership Award

It’s one thing to claim leadership in cloud security; it’s another to have that leadership acknowledged by industry experts. That’s why we’re thrilled to announce our recent recognition by Frost & Sul… Read more on Cisco Blogs

Security – Cisco Blog

Cisco Secure Access named Leader in Zero Trust Network Access

Zero Trust Network Access (ZTNA) is a critical component to increase productivity and reduce risk in today’s hyper-distributed environments. Cisco Secure Access provides a modern form of zero trust a… Read more on Cisco Blogs

Security – Cisco Blog

Complexity drives more than security risk. Secure Access can help with that too.

Modern networks are complex, often involving hybrid work models and a mix of first- and third-party applications and infrastructure. In response, organizations have adopted security service edge… Read more on Cisco Blogs