Login
Chasing AMMYY at Splunk .conf
Discover how Cisco's Encrypted Visibility Engine (EVE) and Endace PCAP uncovered Flawed AMMYY RAT traffic at Splunk .conf without breaking TLS encryption. 
Reading view
Admin in the Loop: Firewalls and the Agentic SOC
Discover how Cisco Secure Firewall and Cloud Control stream structured Snort 3 and EVE telemetry into Splunk ES to power the .conf26 Agentic SOC pipeline.
The Zero-Day Blind Spot: Why Your Agentic SOC needs Retrospective Packet Replay
Learn how the .conf26 Agentic SOC paired Endace full PCAP with Cisco Secure Firewall and Talos rules to retrospectively replay wire data against zero-days.
One Cisco in Action: Inside the Agentic SOC at .conf26
Read how Cisco Cloud Control and Splunk Enterprise Security powered the live Agentic SOC at .conf26 to deliver unified TDIR across live event traffic. 
Splunk .conf26: Tracking the Triage Agent in the Agentic SOC
How Cisco used Splunk as the SOC data platform at .conf26 to unify security telemetry and track the Splunk AI Triage Agent with human-validated workflows. 
Beyond the Box: Future-Proofing Branch Firewall Security for the AI Era
Discover how Cisco Secure Firewall 200 Series modernizes branch security with AI-powered threat detection, encrypted visibility, SD-WAN, and simpler management.
From Love Letters to AI Agents: Cybersecurity’s Evolution
Discover how Cisco security solutions and the four pillars of agentic security protect organizations against autonomous AI risks and evolving threats. 
Black Hat USA 2026: Building the Agentic SOC, One Live Event at a Time
Cisco is the Security Cloud Provider for the Black Hat conferences. Learn about the latest innovations for the Agentic SOC. 
Thrown into the SOC: A Black Hat First-Timer’s Story
A Black Hat SOC analyst shares how agentic workflows, Splunk ES, packet evidence, and human mentorship accelerated triage & investigation in the NOC/SOC.
Troubleshooting Wi-Fi at Black Hat USA 2026 with ThousandEyes
A behind-the-scenes look at troubleshooting Wi-Fi in the Black Hat USA 2026 Network Operations Center with ThousandEyes. 
Distributed Latency Monitoring at Black Hat
Learn how the Black Hat NOC/SOC used ThousandEyes, Linux command-line testing, and packet evidence to monitor distributed latency, isolate DNS issues, and validate network performance during a live cybersecurity event.
Black Hat USA 2026: Safeguarding DNS with Secure Access
Cisco is the Security Cloud Provider for the Black Hat conferences, over a decade providing DNS Security. Learn about protecting DNS with Secure Access. 
Frontier AI just raised the stakes, and the old playbook won’t hold up
Frontier AI is accelerating vulnerability discovery. Learn why layered defenses, faster remediation, and cyber resilience matter more than ever.
Crypto Agility: Why PQC Is Not a One-Time Upgrade
Learn why crypto agility is essential for PQC-ready networks—and how adaptable infrastructure helps organizations keep pace with evolving threats.
From Isolated Agents to Collective Intelligence: Why A2A Is the Protocol the Agentic SOC Has Been Waiting For
The Agentic SOC needs two protocols, not one. Learn how MCP and A2A work together as the vertical and horizontal layers of multi-agent security operations
Microsegmentation’s Moment Is Now: Cisco Named a Leader in The Forrester Wave™: Microsegmentation Solutions
Cisco is a Leader in The Forrester Wave™: Microsegmentation Solutions, Q3 2026, marking back- to- back Leader recognition following the 2024 report.
Identity Everywhere: Bringing Infrastructure Identity to Agentic IT
Segmentation limits attacker movement, contains AI-era threats, and strengthens cyber resilience with Zero Trust. 
Cisco Named a Leader in the 2026 IDC MarketScape for Worldwide SASE
IDC names Cisco a Leader in the 2026 IDC MarketScape for Worldwide SASE. Raj Chopra on why trusted identity is essential to making agentic work production-ready.
Meet Instant Attack Verification: Agentic AI for Tier-1 and Tier-2 SOC investigation
An AI analyst that triages, investigates, and verifies attacks at machine speed — and where it meets the Cisco Data Fabric. 
Elevating Federal Cybersecurity: Cisco’s Path from FedRAMP Certified Class C (Moderate) to Certified Class D (High)
Discover how Cisco’s FedRAMP Certified Class D (High) enables federal agencies to strengthen their Zero Trust architecture and secure mission-critical data. 
