Cisco XDR

Cisco Live Melbourne SOC Report

Posted on by Admin
Cisco Live Melbourne SOC Report

Executive Summary. 1 The Team… 2 Team Leaders. 2 Core Infrastructure and Threat Hunting. 2 Threat Hunting. 2 Build and Operation. 2 SOC Architecture. 2 Cisco Secure Access Enables ZTNA for SOC Admins. 4 Powering XDR with the Cisco Secure Portfolio. 6 Analyst Stories. 9 New Domain Investigations. 9 Mirai Botnet Attempts. 11 Log4j Attempts. 14 SERVER-WEBAPP LB-Link Multiple BLRouters command injection attempt (1:62009:1) Dinkar Sharma, Aditya Sankar 16 Threat hunting and Noise reduction in…

Read More

NIS2 compliance for industrial networks: Are you ready?

Posted on by Admin
NIS2 compliance for industrial networks: Are you ready?

Since the European Union (EU) signed the second version of the Network and Information Security (NIS2) Directive in December 2022, there has been a real frenzy all around Europe about it. NIS2 is now on top of the priority lists of most European Chief Information Security Officers (CISO). But do you know what it is? And most importantly, should you be concerned? You probably have no choice but to comply with NIS2 The short answer…

Read More

Agniane Stealer: Information stealer targeting cryptocurrency users

Posted on by Admin
Agniane Stealer: Information stealer targeting cryptocurrency users

The Agniane Stealer is an information-stealing malware mainly targeting the cryptocurrency wallets of its victims. It gained popularity on the internet starting in August 2023. Recently, we have observed a distinct campaign spreading it across our telemetry. Our recent study has led to the successful identification and detailed analysis of a previously unrecognized network URL pattern. Our researchers have recently uncovered more information on the malware’s methods for file collection and the intricacies of its…

Read More

Security and AI Innovation: Creating New Opportunities for Partner Growth

Posted on by Admin
Security and AI Innovation: Creating New Opportunities for Partner Growth

I’m on the heels of another incredible week of Cisco events—this time with our customers and partners at Cisco Live EMEA. My main takeaways for partners: we’re driving new security opportunities for you and simplified, effective security for all. Let’s dive into it a bit more. New Security and AI Advancements It really hit home for me when I heard Jeetu Patel on stage talking about how we’ve had more innovations in Cisco Security in…

Read More

Cisco User Protection Suite Provides MSSPs a Comprehensive and Compelling Package

Posted on by Admin
Cisco User Protection Suite Provides MSSPs a Comprehensive and Compelling Package

In August 2023, I authored a blog on Cisco Secure Access, where I discussed the advantages of utilizing a comprehensive, single vendor, Security Service Edge (SSE) packages for both customers and Managed Security Services Providers (MSSPs). Since then, Cisco has launched three security-focused suites that address key customer use cases for the user, for the cloud, and for breach protection. In this blog, we’ll explore the Cisco User Protection Suite, specifically, to understand what it…

Read More

Black Hat Europe 2023 NOC: Threat Hunting

Posted on by Admin
Black Hat Europe 2023 NOC: Threat Hunting

Cisco is a longtime partner of the Black Hat NOC and 2023 was our seventh year supporting Black Hat Europe. Cisco is the Official Mobile Device Management, Malware Analysis and DNS (Domain Name Service) Provider. We work with the other official providers to bring the hardware, software and engineers to build and secure the network, for our joint customer: Black Hat. Arista: Wired and Wireless Network Equipment Corelight: Network Analytics and Detection NetWitness: Threat Detection…

Read More

MSSPs: Differentiate your Managed Security Offerings with Cisco XDR

Posted on by Admin
MSSPs: Differentiate your Managed Security Offerings with Cisco XDR

As an MSSP (Managed Security Service Provider), there is no overstating the intense and well-founded focus on pervasive network security. Whether an organization is looking to secure the network, endpoint, email, cloud, applications, identity, or anything in between, security professionals are overwhelmed with the sheer volume of tools, technologies, and security methodologies that need to be considered. This is only exacerbated by the increasing number of complex threats and techniques being employed by bad actors…

Read More

Cisco XDR: SLEDs “SOC in a Box”

Posted on by Admin
Cisco XDR: SLEDs “SOC in a Box”

For State, Local, and Education (both Higher Ed and K-12) (SLED) entities the Security Operations Center (SOC) is a required tool in the toolbox and a necessity for Cyber Insurance.  Threats to data and information are ever evolving, and better safeguarding the security of SLED entities is a must. The cornerstone of a robust defense is the SOC. In this blog, we’ll explore how Cisco XDR simplifies and enhances the operations of SLED-focused SOCs, helping…

Read More

Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP’s

Posted on by Admin
Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP’s

Security Operations Centers (SOC) are responsible for detecting and responding to potential cyber threats in real-time. With the increasing complexity of cyberattacks, it’s important for SOC teams to have comprehensive coverage of MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) tactics, techniques, and procedures (TTPs). Today we’re discussing the importance of having comprehensive coverage of MITRE ATT&CK TTPs in security operations, and how Cisco technology can help to achieve this goal. Why MITRE ATT&CK TTPs…

Read More
1 2 3