Latest updates for Cisco Xdr

Fresh curated links around Cisco XDR are collected here so marketers can spot useful updates and turn timely ideas into posts faster.

Recent items include:

  • Building a Risk-Based Secure Network Analytics Detection with Splunk Detection Editor (Alpha)
  • Chasing AMMYY at Splunk .conf
  • Splunk .conf26: Tracking the Triage Agent in the Agentic SOC

Post angles to try

Share the most useful takeaway for your audience.
Turn one article into a quick practical checklist.
Ask your audience how this shift affects their work.
Turn angles into scheduled posts

Fresh articles and ideas

Recent curated links from global sources. Generate one free draft from any story, then use SocialBu to schedule and refine your content calendar.

blogs.cisco.com /1 month ago

Building a Risk-Based Secure Network Analytics Detection with Splunk Detection Editor (Alpha)

At Black Hat USA, we used Splunk Detection Editor Alpha to turn Cisco SNA alarms into risk events with context, drilldowns & analyst-ready investigation paths.

Read source
blogs.cisco.com /2 weeks ago

Chasing AMMYY at Splunk .conf

Discover how Cisco's Encrypted Visibility Engine (EVE) and Endace PCAP uncovered Flawed AMMYY RAT traffic at Splunk .conf without breaking TLS encryption.

Read source
blogs.cisco.com /2 weeks ago

Splunk .conf26: Tracking the Triage Agent in the Agentic SOC

How Cisco used Splunk as the SOC data platform at .conf26 to unify security telemetry and track the Splunk AI Triage Agent with human-validated workflows.

Read source
blogs.cisco.com /1 month ago

Black Hat USA 2026: Safeguarding DNS with Secure Access

Cisco is the Security Cloud Provider for the Black Hat conferences, over a decade providing DNS Security. Learn about protecting DNS with Secure Access.

Read source
cybersecuritynews.com /1 month ago

Top 10 Best Cloud Detection & Response (CDR) Solutions in 2026

CDR is the runtime, real-time half of cloud security: while CSPM tells you what’s misconfigured, CDR tells you what’s happening right now an attacker using stolen cloud credentials...

Read source
blogs.cisco.com /11 hours ago

Unified Defense from Endpoint to Cloud: Real-Time Protection with Cisco Security, Splunk, and SentinelOne

Discover how Cisco and SentinelOne work together across Splunk, Duo, Firepower and now ISE — turning endpoint detection into automated network access decisions.

Read source
blogs.cisco.com /2 weeks ago

One Cisco in Action: Inside the Agentic SOC at .conf26

Read how Cisco Cloud Control and Splunk Enterprise Security powered the live Agentic SOC at .conf26 to deliver unified TDIR across live event traffic.

Read source
thehackernews.com /1 month ago

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VMware hypervisors to compromise Cisco IOS XR routers, Terminal Access Controlle...

Read source
healthtechmagazine.net /1 week ago

Your Security Stack Is Working. Are Your Security Operations?

Walk into a modern enterprise security operations center today, and you'll discover just how inexpensive 65-inch monitors are: The walls are covered with them, showing dashboards f...

Read source
blogs.cisco.com /1 month ago

Cisco and Axis Communications: Greater visibility, scalability, and incident management

Cisco and Axis Communications now allow managing Axis devices directly via the Meraki dashboard. This integration unifies IT and physical security, providing centralized visibility...

Read source
blogs.cisco.com /1 month ago

Native Splunk brings real-time insights to Cisco Nexus One

Discover how native Splunk embedded in Cisco Nexus Dashboard delivers real-time analytics, faster troubleshooting, and on-premises data sovereignty for modern data center and AI wo...

Read source
blogs.cisco.com /2 weeks ago

The Zero-Day Blind Spot: Why Your Agentic SOC needs Retrospective Packet Replay

Learn how the .conf26 Agentic SOC paired Endace full PCAP with Cisco Secure Firewall and Talos rules to retrospectively replay wire data against zero-days.

Read source
blogs.cisco.com /2 weeks ago

Admin in the Loop: Firewalls and the Agentic SOC

Discover how Cisco Secure Firewall and Cloud Control stream structured Snort 3 and EVE telemetry into Splunk ES to power the .conf26 Agentic SOC pipeline.

Read source
blogs.cisco.com /1 month ago

Thrown into the SOC: A Black Hat First-Timer’s Story

A Black Hat SOC analyst shares how agentic workflows, Splunk ES, packet evidence, and human mentorship accelerated triage & investigation in the NOC/SOC.

Read source
blogs.cisco.com /1 day ago

Protect enterprise coding agents with Cisco DefenseClaw and NVIDIA OpenShell

AI coding agents act with your rights. Cisco DefenseClaw runs them in NVIDIA OpenShell sandboxes, with one policy that follows the person who signed in.

Read source
blogs.cisco.com /3 weeks ago

Beyond the Box: Future-Proofing Branch Firewall Security for the AI Era

Discover how Cisco Secure Firewall 200 Series modernizes branch security with AI-powered threat detection, encrypted visibility, SD-WAN, and simpler management.

Read source
blogs.cisco.com /14 hours ago

Antares: a Security Analyst That Never Leaves Your Laptop – Security Loop Series, Part 1

A CWE advisory names your dependency, but not where the bug lives. See how Cisco's Antares-1B localizes it offline on a laptop, with auditable traces and honest benchmark numbers.

Read source
internationalsecurityjournal.com /1 week ago

KDDI launches new managed detection and response service

KDDI America, Inc. and KDDI Europe Ltd. (subsidiaries of KDDI Corporation) have launch a new Managed Detection and Response (MDR) service with a 24/7 AI-powered security operations...

Read source
blogs.cisco.com /1 month ago

Closing the Resilience Gap with Native Splunk in Cisco Nexus One

See how Native Splunk and Cisco Nexus One bring analytics closer to network data, strengthen resilience, and connect teams across operational domains.

Read source
cloud.google.com /3 weeks ago

Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances

Introduction In late September 2026, Mandiant Consulting and Google Threat Intelligence Group (GTIG) identified active, in-the-wild exploitation of a zero-day vulnerability (CVE-20...

Read source
thehackernews.com /3 weeks ago

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Explo...

Read source
nextbigfuture.com /1 month ago

Axoflow Launches AxoDetect, Bringing Detection Into the Pipeline and Making the SIEM Optional

Stamford, CT, 16th September 2026, CyberNewswire

Read source
blogs.cisco.com /1 month ago

Black Hat USA 2026: Building the Agentic SOC, One Live Event at a Time

Cisco is the Security Cloud Provider for the Black Hat conferences. Learn about the latest innovations for the Agentic SOC.

Read source
gbhackers.com /1 month ago

Axoflow Launches AxoDetect, Bringing Detection Into the Pipeline and Making the SIEM Optional

Stamford, CT, September 16th, 2026, CyberNewswire Now in early access, AxoDetect runs Sigma rules in stream alerts travel to the SIEM, and full-fidelity logs land in AxoLake, a low...

Read source

Turn fresh research into a full content calendar

Use SocialBu to discover ideas, generate post drafts, and schedule them across your social channels.

Sources covering Cisco Xdr

blogs.cisco.com

Recent coverage from public sources
Public source

cloudblog.withgoogle.com

Recent coverage from public sources
Public source

cybersecuritynews.com

Recent coverage from public sources
Public source

feeds.feedburner.com

Recent coverage from public sources
Public source

feeds.feedburner.com

Recent coverage from public sources
Public source

gbhackers.com

Recent coverage from public sources
Public source