Cisco Live EMEA SOC team engineered a seamless, bidirectional integration between Cisco XDR and Splunk Enterprise Security, automating escalations and investigation workflows to eliminate friction, preserve context, and unify analyst collaboration across platforms.
Tag: Cisco
AI, Global Security News
Cisco Live Amsterdam 2026: Enhancing Security Operations with Cisco Foundation AI (Reasoning)
Discover how Cisco Live EMEA SOC leveraged an innovative, integrated security architecture—featuring the new Cisco Security Foundation AI Reasoning model.
Global Security News
Splunk & Cisco Secure Firewall: Better Together at Cisco LiveAmsterdam 2026
The Cisco Live Amsterdam SOC team upgraded to Secure Firewallversion 10.0, deploying new Splunk integrations and Advanced Loggingfeatures to enhance SIEM data quality and visibility, streamlineconfiguration.
Global Security News, Network Security
From Flood to Focus: Finding Signal in an “Overflow Attempt” Alert Storm
Cisco XDR, Splunk, Cisco Secure Firewall, and Endace (Zeek) were used to investigate a spike in security alerts at Cisco Live EMEA, quickly distinguishing genuine threats from environmental noise through correlated incident analysis and network context.
AI, Exploits, Global Security News, Network Security, Risk Management
Cisco flags ongoing exploitation of two recently patched Catalyst SD-WAN flaws
Cisco warns that two recently patched Catalyst SD-WAN flaws, CVE-2026-20128 and CVE-2026-20122, are already being actively exploited in the wild. Cisco warned customers that threat actors are actively exploiting two recently patched Catalyst SD-WAN vulnerabilities, CVE-2026-20128 and CVE-2026-20122. The networking giant urged organizations to apply the latest security updates to reduce the risk of compromise.…
Global Security News
Cisco Patches 48 Firewall Vulnerabilities with Two CVSS 10 Flaws
Cisco patches 48 vulnerabilities in Secure Firewall products, including two critical CVSS 10 flaws that could allow authentication bypass and remote code execution.
Global Security News
Cisco Drops 48 New Firewall Vulnerabilities, 2 Critical
Edge bugs are so fetch, and Cisco just dropped 50 new ones, including some heavy hitters with 10 out of 10 scores on the CVSS scale.
AI, Apps, Data Breaches, Endpoint, Exploits, Global Security News, Network Security, Risk Management
Cisco SD-WAN Manager Vulnerabilities Actively Exploited
Cisco is warning customers that attackers are actively exploiting multiple vulnerabilities affecting its Catalyst SD-WAN Manager platform. The software serves as a centralized management console used to monitor and control large distributed SD-WAN deployments. These vulnerabilities “… could allow an attacker to access an affected system, elevate privileges to root, gain access to sensitive information,…
AI, Exploits, Global Security News
Cisco issues emergency patches for critical firewall vulnerabilities
Cisco has handed security teams one of the largest ever patching workloads affecting its firewall products, including fixes for two ‘perfect 10’ vulnerabilities in the company’s Secure Firewall Management Center (FMC) Software. Overall, the March 4 release, the first of its semiannual firewall updates for 2026, addresses 25 security advisories covering 48 individual CVEs. The…
AI, Apps, Data Breaches, Endpoint, Exploits, Global Security News, Network Security, Risk Management
Cisco Firewall Management Flaw Enables Remote Code Execution
Cisco has reported a vulnerability in its Secure Firewall Management Center (FMC) software that could allow attackers to remotely execute code and take full control of affected systems. The flaw does not require user interaction or authentication. “An attacker could exploit this vulnerability by sending a crafted serialized Java object to the web-based management interface…
AI, Apps, Cybersecurity, Exploits, Global Security News, malware, Network Security
Cisco reveals 2 max-severity defects in firewall management software
Cisco released information on a pair of max-severity vulnerabilities in its firewall management software Wednesday that unauthenticated, remote attackers could exploit to obtain the highest level of access to the underlying operating system or on affected devices. The vulnerabilities — CVE-2026-20079 and CVE-2026-20131 — affect the web-based interface of Cisco Secure Firewall Management Center (FMC)…
Exploits, Global Security News
Cisco Confirms Active Exploitation of Two Catalyst SD-WAN Manager Vulnerabilities
Cisco has disclosed that two more vulnerabilities affecting Catalyst SD-WAN Manager (formerly SD-WAN vManage) have come under active exploitation in the wild. The vulnerabilities in question are listed below – CVE-2026-20122 (CVSS score: 7.1) – An arbitrary file overwrite vulnerability that could allow an authenticated, remote attacker to overwrite arbitrary files on the local file…
AI, Exploits, Global Security News
Cisco warns of SD-WAN Manager exploitation, fixes 48 firewall vulnerabilities
Cisco has confirmed that two Catalyst SD-WAN Manager vulnerabilities (CVE-2026-20128 and CVE-2026-20122) patched in late February 2025 are being exploited by attackers. The exploited vulnerabilities (CVE-2026-20128, CVE-2026-20122) CVE-2026-20128 is a bug in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager, which could allow an authenticated, local attacker to gain DCA user privileges…
Exploits, Global Security News
Cisco flags more SD-WAN flaws as actively exploited in attacks
Cisco has flagged two more Catalyst SD-WAN Manager security flaws as actively exploited in the wild, urging administrators to upgrade vulnerable devices. […]
Global Security News
Cisco Issues Patches for 48 Vulnerabilities in Enterprise Networking Products
Two of the 48 Cisco vulnerabilities, affecting Secure Firewall Management Center, are maximum-severity flaws
AI, Apps, Exploits, Global Security News, malware, Network Security
Cisco fixes maximum-severity Secure FMC bugs threatening firewall security
Cisco patched two critical Secure FMC vulnerabilities that could let attackers gain root access to managed firewalls. Cisco addressed two maximum-severity vulnerabilities in its Secure Firewall Management Center (FMC) that could allow attackers to gain root access. Cisco Secure Firewall Management Center (FMC) is a centralized management platform for Cisco firewalls. It lets administrators configure,…
Global Security News
Cisco warns of max severity Secure FMC flaws giving root access
Cisco has released security updates to patch two maximum-severity vulnerabilities in its Secure Firewall Management Center (FMC) software. […]
Global Security News, Network Security, Risk Management
From Core to Edge: Building Secure, Always-On Infrastructure for Global Mobile Networks
Telecom networks face major security risks; Cisco is strengthening infrastructure to make secure operations the default, not the exception.
AI, Data Breaches, Exploits, Global Security News, Network Security, Risk Management
Cisco SD-WAN Zero-Day Actively Exploited to Gain Root Access
A zero-day vulnerability in Cisco Catalyst SD-WAN products has been actively exploited since at least 2023, allowing attackers to bypass authentication and ultimately gain root access in targeted environments. This flaw affects core control-plane components and has been linked to a sophisticated threat actor cluster known as UAT-8616. “The Cisco Catalyst SD-WAN zero-day, which is…
AI, Cybersecurity, Exploits, Global Security News, Network Security, Risk Management
U.S. CISA adds Cisco SD-WAN flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco SD-WAN flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two Cisco SD-WAN flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the catalog: CVE-2022-20775 Cisco Catalyst SD-WAN Path Traversal Vulnerability CVE-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication…
AI, Exploits, Global Security News, Network Security, Risk Management
Hackers abused Cisco SD-WAN zero-day since 2023 to gain full admin control
Cisco SD-WAN vulnerability CVE-2026-20127 has been exploited since 2023 to gain unauthenticated admin access. A critical Cisco SD-WAN vulnerability, tracked as CVE-2026-20127 (CVSS score of 10.0), has been actively exploited since 2023. The flaw affects Catalyst SD-WAN Controller and Manager and allows remote, unauthenticated attackers to bypass authentication and gain full administrative access by sending…
Exploits, Global Security News
Global Cyber Agencies Urge Immediate Patching of Cisco SD-WAN Zero Day
The US and allies are urging Cisco Catalyst SD-WAN customers to hunt for signs of exploitation
AI, Exploits, Global Security News
Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access
A newly disclosed maximum-severity security flaw in Cisco Catalyst SD-WAN Controller (formerly vSmart) and Catalyst SD-WAN Manager (formerly vManage) has come under active exploitation in the wild as part of malicious activity that dates back to 2023. The vulnerability, tracked as CVE-2026-20127 (CVSS score: 10.0), allows an unauthenticated remote attacker to bypass authentication and obtain
Exploits, Global Security News, Network Security
Critical Cisco SD-WAN bug exploited in zero-day attacks since 2023
Cisco is warning that a critical authentication bypass vulnerability in Cisco Catalyst SD-WAN, tracked as CVE-2026-20127, was actively exploited in zero-day attacks that allowed remote attackers to compromise controllers and add malicious rogue peers to targeted networks. […]
Global Security News, Network Security
Modernizing TACACS+: Why Full-Session Encryption Matters More Than Ever
Protect your network from Salt Typhoon-style attacks. Learn how Cisco ISE 3.4 uses TACACS+ over TLS 1.3 and Duo MFA to provide full-session encryption.
Global Security News
Changes to TLS clientAuth Certificates: Ensuring You’re Not Impacted
Upcoming changes to public TLS client authentication certificates may affect Cisco users. Audit and update trust stores to ensure secure, uninterrupted services.
AI, AI Cybersecurity, Cisco Secure Firewall, Exploits, firewall, Global Security News, next generation firewall, Security
Double Defense: Cisco Secure Firewall 10.0 Confronts Encrypted Traffic and Emerging Attack Challenges
Discover how Cisco Secure Firewall 10.0 boosts visibility and protection against modern threats, from encrypted attacks to AI-driven exploits.
AI, AI Cybersecurity, Cisco Secure Firewall, Exploits, firewall, Global Security News, next generation firewall, Security
Double Defense: Cisco Secure Firewall 10.0 Confronts Encrypted Traffic and Emerging Attack Challenges
Discover how Cisco Secure Firewall 10.0 boosts visibility and protection against modern threats, from encrypted attacks to AI-driven exploits.
AI, cisco, Global Security News, Industry News
Cisco enhances security for enterprise AI adoption
Cisco announced a suite of capabilities to help enterprises adopt agentic AI with confidence, combining agent protection, interaction governance, and resilient connectivity for AI-driven workflows. As organizations move from AI assistants to autonomous agents that use tools and data across hybrid environments, security teams need to strengthen agentic defenses, govern agent interactions with enterprise systems…
agentic ai, AI, Global Security News, secure access, Security, Shadow AI, zero trust
SASE for the AI Era: Driving Secure, Distributed, and Optimized AI
Learn how Cisco SASE enables secure, predictable, and scalable AI operations by unifying performance and protection for distributed, agentic AI workflows.
agentic ai, AI, Global Security News, secure access, Security, Shadow AI, zero trust
SASE for the AI Era: Driving Secure, Distributed, and Optimized AI
Learn how Cisco SASE enables secure, predictable, and scalable AI operations by unifying performance and protection for distributed, agentic AI workflows.
Black Hat, Cisco Breach Protection, Cisco Secure Access, Cisco Security Cloud, Global Security News, Security
Securing DNS With Secure Access at Black Hat Europe
For a decade, Cisco has secured Black Hat events with DNS security. Learn how the evolution to Cisco Secure Access provided visibility into 66 million queries and 6,000 unique apps in London.
Black Hat, Cisco Breach Protection, Cisco Secure Access, Cisco Security Cloud, Global Security News, Security
Securing DNS With Secure Access at Black Hat Europe
For a decade, Cisco has secured Black Hat events with DNS security. Learn how the evolution to Cisco Secure Access provided visibility into 66 million queries and 6,000 unique apps in London.
Black Hat, Cisco Breach Protection, Cisco Secure Access, Cisco Security Cloud, Global Security News, Security
Securing DNS With Secure Access at Black Hat Europe
For a decade, Cisco has secured Black Hat events with DNS security. Learn how the evolution to Cisco Secure Access provided visibility into 66 million queries and 6,000 unique apps in London.
Black Hat, Cisco Breach Protection, Cisco Secure Access, Cisco Security Cloud, Global Security News, Security
Securing DNS With Secure Access at Black Hat Europe
For a decade, Cisco has secured Black Hat events with DNS security. Learn how the evolution to Cisco Secure Access provided visibility into 66 million queries and 6,000 unique apps in London.
Black Hat, Cisco Breach Protection, Cisco Secure Access, Cisco Security Cloud, Global Security News, Security
Securing DNS With Secure Access at Black Hat Europe
For a decade, Cisco has secured Black Hat events with DNS security. Learn how the evolution to Cisco Secure Access provided visibility into 66 million queries and 6,000 unique apps in London.
AI, china, Cisco Talos, Global Security News, malware, Security
China-Linked DKnife Spyware Hijacking Internet Routers Since 2019
Cisco Talos uncovers DKnife, a China-nexus framework targeting routers and edge devices. Learn how seven stealthy implants hijack data and deliver malware via AitM attacks.
AI, china, Cisco Talos, Global Security News, malware, Security
China-Linked DKnife Spyware Hijacking Internet Routers Since 2019
Cisco Talos uncovers DKnife, a China-nexus framework targeting routers and edge devices. Learn how seven stealthy implants hijack data and deliver malware via AitM attacks.
AI, china, Cisco Talos, Global Security News, malware, Security
China-Linked DKnife Spyware Hijacking Internet Routers Since 2019
Cisco Talos uncovers DKnife, a China-nexus framework targeting routers and edge devices. Learn how seven stealthy implants hijack data and deliver malware via AitM attacks.
Black Hat, Cisco Breach Protection, Cisco Live, Cisco Secure Access, Global Security News, Security
Lessons Learned from Securing the World’s Largest Cyber Events
Announcing the launch of the Cisco Event SOCs website and the release of our comprehensive Reference Architecture & Operations Guide.
Black Hat, Cisco Breach Protection, Cisco Live, Cisco Secure Access, Global Security News, Security
Lessons Learned from Securing the World’s Largest Cyber Events
Announcing the launch of the Cisco Event SOCs website and the release of our comprehensive Reference Architecture & Operations Guide.
Black Hat, Cisco Breach Protection, Cisco Live, Cisco Secure Access, Global Security News, Security
Lessons Learned from Securing the World’s Largest Cyber Events
Announcing the launch of the Cisco Event SOCs website and the release of our comprehensive Reference Architecture & Operations Guide.
Black Hat, Cisco Breach Protection, Cisco Live, Cisco Secure Access, Global Security News, Security
Lessons Learned from Securing the World’s Largest Cyber Events
Announcing the launch of the Cisco Event SOCs website and the release of our comprehensive Reference Architecture & Operations Guide.
Black Hat, Cisco Breach Protection, Cisco Live, Cisco Secure Access, Global Security News, Security
Lessons Learned from Securing the World’s Largest Cyber Events
Announcing the launch of the Cisco Event SOCs website and the release of our comprehensive Reference Architecture & Operations Guide.
AI, Global Security News, Security, security policy, Security resilience, Security Software, security solutions
Cisco is Proud to Champion the UK’s Software Security Code of Practice
Cisco champions the UK’s Software Security Code of Practice in support of secure software supply chains and strengthening trust in digital services.
AI, Global Security News, Security, security policy, Security resilience, Security Software, security solutions
Cisco is Proud to Champion the UK’s Software Security Code of Practice
Cisco champions the UK’s Software Security Code of Practice in support of secure software supply chains and strengthening trust in digital services.
AI, Global Security News, Security, security policy, Security resilience, Security Software, security solutions
Cisco is Proud to Champion the UK’s Software Security Code of Practice
Cisco champions the UK’s Software Security Code of Practice in support of secure software supply chains and strengthening trust in digital services.
AI, Global Security News, Security, security policy, Security resilience, Security Software, security solutions
Cisco is Proud to Champion the UK’s Software Security Code of Practice
Cisco champions the UK’s Software Security Code of Practice in support of secure software supply chains and strengthening trust in digital services.
agentic ai, AI, AI Cybersecurity, Foundation AI, Global Security News, Security
AI search framework that teaches AI models to think like experts
Cisco Foundation AI introduces AI search framework for more efficient search by models