LoginGovWare 2025 Security Operations Centre
3 December 2025 at 01:03
Cisco Security and Splunk secured the GovWare 2025 network in the Security Operations Centre. Learn about the latest innovations for the SOC of the Future.
Normal view
Before yesterdayMain stream
-
Cisco Security
- From Detection to Deep Dive: Splunk Attack Analyzer and Endace for GovWare 2025 Security
From Detection to Deep Dive: Splunk Attack Analyzer and Endace for GovWare 2025 Security
2 December 2025 at 03:00
At GovWare 2025, the team leveraged Splunk Attack Analyzer's API to connect to Endace.
Unmasking Attacks With Cisco XDR at the GovWare SOC
2 December 2025 at 03:00
During GovWare, Cisco XDR detected 39 incidents. The SOC team conducted analysis and response actions, and reported critical incidents to the GovWare NOC.
Splunk SOAR in Action at the GovWare: Zero-Touch Clear Text Password Response
2 December 2025 at 03:00
At GovWare 2025, the SOC team combined ES with Splunk SOAR to fully automate and track the incident response process.
GovWare Captive Portal: (Splash Page)
2 December 2025 at 03:00
Cisco provided a splash page for GovWare 2025, a click-through captive portal. Learn how the team did it.
SOC in a Box Hardware Refresh
2 December 2025 at 03:00
Learn about the "SOC in a Box" hardware refresh the team deployed for GovWare 2025.
Monitoring Encrypted Client Hello (ECH) With Cisco Secure Firewall
2 December 2025 at 03:00
At GovWare 2025, the SOC team observed ECH activity. Learn more about this and how it impacted security.
Cisco XDR Agentic AI With Cisco’s Foundational AI Model
2 December 2025 at 03:00
At GovWare, we showcased a proof of concept built on Cisco's Foundation AI model on Hugging Face.
Guardians of GovWare: Real-Time Threat Detection With Cisco Secure Access
2 December 2025 at 03:00
Secure Access served as the primary method of securing DNS-layer traffic for the GovWare 2025 Security Operations Centre (SOC).
NK’s Famous Chollima Use BeaverTail and OtterCookie Malware in Job Scam
16 October 2025 at 12:46
North Korea's Famous Chollima is back, merging BeaverTail and OtterCookie malware to target job seekers. Cisco Talos details the new threat. Keylogging, screen recording, and cryptocurrency wallet theft detected in an attack.
-
- Canadian Bacon Cybersecurity: SharePoint Vulnerabilities and Vulnerabilities in General
Canadian Bacon Cybersecurity: SharePoint Vulnerabilities and Vulnerabilities in General
1 October 2025 at 08:00
Learn about the Microsoft SharePoint vulnerability and which steps you can take to mitigate the effects of this — and other — vulnerabilities.
SnortML: Cisco’s ML-Based Detection Engine Gets Powerful Upgrade
11 September 2025 at 08:00
SnortML, Cisco's innovative ML engine for Snort IPS, proactively detects evolving exploits like SQL Injection, Command Injection & XSS on-device for privacy.
Conference Hopping: Training Attendee Scanning Def Con
3 September 2025 at 08:00
Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.
Driving Cisco XDR Integration With Third-Party Partners at Black Hat
3 September 2025 at 08:00
Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.
Cisco Secure Firewall: SnortML at Black Hat USA 2025
3 September 2025 at 08:00
Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.
Black Hat Investigation: Attempted Exploitation of Registration Server
3 September 2025 at 08:00
Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.
The Value of PCAP in Firewall Investigations
3 September 2025 at 08:00
Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.
Black Hat Training Attendees Scan Aviation Organization
3 September 2025 at 08:00
Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.
Black Hat USA 2025: 10 Years Protecting Black Hat
3 September 2025 at 08:00
Cisco is a proud partner of the Black Hat NOC (Network Operations Center), as the Official Security Cloud Provider, celebrating our 10th year protecting Black Hat, the longest of any partner. We work with other official providers to bring the hardware, software and engineers to build and secure the Black Hat USA network: Arista, Corelight, […]
Refining SSO at Black Hat USA
3 September 2025 at 08:00
Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.
