Login
Chasing AMMYY at Splunk .conf
Discover how Cisco's Encrypted Visibility Engine (EVE) and Endace PCAP uncovered Flawed AMMYY RAT traffic at Splunk .conf without breaking TLS encryption. 
Reading view
The Zero-Day Blind Spot: Why Your Agentic SOC needs Retrospective Packet Replay
Learn how the .conf26 Agentic SOC paired Endace full PCAP with Cisco Secure Firewall and Talos rules to retrospectively replay wire data against zero-days.
Frontier AI just raised the stakes, and the old playbook won’t hold up
Frontier AI is accelerating vulnerability discovery. Learn why layered defenses, faster remediation, and cyber resilience matter more than ever.
Crypto Agility: Why PQC Is Not a One-Time Upgrade
Learn why crypto agility is essential for PQC-ready networks—and how adaptable infrastructure helps organizations keep pace with evolving threats.
From Isolated Agents to Collective Intelligence: Why A2A Is the Protocol the Agentic SOC Has Been Waiting For
The Agentic SOC needs two protocols, not one. Learn how MCP and A2A work together as the vertical and horizontal layers of multi-agent security operations
Identity Everywhere: Bringing Infrastructure Identity to Agentic IT
Segmentation limits attacker movement, contains AI-era threats, and strengthens cyber resilience with Zero Trust. 
Cisco Named a Leader in the 2026 IDC MarketScape for Worldwide SASE
IDC names Cisco a Leader in the 2026 IDC MarketScape for Worldwide SASE. Raj Chopra on why trusted identity is essential to making agentic work production-ready.
Meet Instant Attack Verification: Agentic AI for Tier-1 and Tier-2 SOC investigation
An AI analyst that triages, investigates, and verifies attacks at machine speed — and where it meets the Cisco Data Fabric. 
The Zero Trust Imperative for the Frontier AI Era
Discover how to apply Zero Trust principles to secure AI adoption, manage agentic risk, and mitigate the threats of frontier AI models.
Machine Speed, Human Judgement: How AI Changed the SOC in 2026
A firsthand look inside the Cisco Live 2026 SOC and how AI, automation, and agentic workflows are transforming modern security operations. 
Elevating Expertise in the SOC
At Cisco Live AMER 2026, Tier One SOC Analysts elevate their expertise by investigating further with Splunk Security and Endace. 
Educate at Event Speed: Cisco Live Security Operations Center
At Cisco Live AMER 2026, the Cisco Event SOC turned live operations into education through SOC tours, speaker sessions, and World of Solutions conversations. 
Making Workflow Runs Explain Themselves: AI-Powered Run Summaries in Cisco XDR Automate
Cisco XDR Automate now uses AI to summarize workflow runs, speeding up troubleshooting and improving transparency across automation and agentic AI.
Defenseclaw for On-Prem AI SOC Workflow at Black Hat Asia
At Black Hat Asia, we tested a private AI SOC workflow built with Ollama, NVIDIA GPU acceleration, Open WebUI, OpenClaw, DefenseClaw, Cisco AI Defense and MCP integrations, with Splunk audit visibility.
Identity Elevated: A New Unified Identity Experience in Cisco Cloud Control
Identity in Cloud Control provides visibility, ability to take action on human, non-human, and AI agent identities, and powers identity-driven AgenticOps with AI Canvas.
Security Needs a New Operating Model
Explore how Security in Cisco Cloud Control with AI Canvas unifies context, policy, and AI-guided action across fragmented security operations.
