Cisco Duo
“Cisco Duo secures workforce access and defends against advanced identity threats with IAM, phishing-resistant MFA, SSO, passwordless, and device trust.”
MFA and device trust, with support for passkeys and security keys.
Product pageCisco
United States4 products listed
Defend users, apps, and data against today's threats. Enable your agentic enterprise at scale with an open, network-native platform.
Our summaryNetworking company with a broad security portfolio including Duo, Umbrella and Secure Firewall. Its Talos team is one of the largest commercial threat research groups.
- Products listed
- 4
- Research stories
- 89
- Incidents and advisories
- 177
- Indicators
- 650
Cisco in our news, month by month
ResearchIncidents and advisories
4
32
Jun
10
11
Jul
10
12
Aug
13
26
Sept
19
27
Oct
5
8
Nov
Products and the controls they provide
Cisco Umbrella
“Cisco's enterprise network security provides advanced protection on a unified, cloud-delivered solution designed for the modern workplace.”
DNS-layer security and secure web gateway delivered from the cloud.
Product pageCisco Secure Firewall
“Cisco's Secure Firewall hardware and software options enhance your security to block more threats and swiftly respond to breaches.”
Next-generation firewalls with intrusion prevention, using Talos threat intelligence.
Product pageCisco AI Defense
“AI Defense is an end-to-end AI security solution that protects against the safety and security risks introduced by the development, deployment, and usage of AI.”
Discovery of AI use, testing of models and guardrails for AI applications.
Product pageExternal reviews
Independent tests, peer reviews and articles about Cisco. We link to them; we did not write or commission them, and nobody pays to appear here.
Research by Cisco
Stories in our coverage based on what researchers at Cisco found or reported: 89 in total.
- 13 Nov 2026ARTEX and beyond: AI-enabled penetration testing platforms
AI-enabled penetration testing frameworks like ARTEX are being misused by threat actors to accelerate intrusions.
- 11 Nov 2026Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities
Microsoft November 2026 Patch Tuesday addresses 1095 vulnerabilities, including 64 critical ones.
- 2 Nov 2026VOLTA, the infostealer that asks an AI which victims are worth the effort
VOLTA infostealer uses AI to rank victims by financial value after stealing credentials and personal data.
- 2 Nov 2026AI-powered infostealer picks out the most profitable parts of your stolen data
VOLTA-AUTODOXER infostealer uses AI to rank stolen data by monetary value for attackers.
- 2 Nov 2026VOLTA Malware Steals Gmail and Discord Sessions, Then Uses AI to Build Detailed Victim Profiles
VOLTA malware steals sessions and uses AI to profile victims for value and security habits.
- 31 Oct 2026Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
New Volta-Autodoxer malware uses AI to profile victims and prioritize high-value targets.
- 30 Oct 2026Hackers Weaponize OpenAI API in NIK C2 Framework for Credential Theft and Remote System Control
NIK C2 malware framework weaponizes OpenAI API for credential theft and remote system control.
- 30 Oct 2026Fake IT help desk callers got by on little more than names and email addresses
Attackers impersonate IT help desk staff to gain remote access, leading to ransomware in some cases.
- 29 Oct 2026Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
APT group UAT-11473 exploits Cisco SD-WAN auth-bypass flaw to deploy KeyDrift malware.
- 29 Oct 2026A quiet week in infosec <.<
New NIK C2 framework uses AI for on-the-fly data analysis and payload generation.
Incidents and advisories
Stories where a Cisco product had a vulnerability or was attacked, or Cisco itself was: 177 in total. Useful if you run its products.
- 11 Nov 2026Asus, Zoom Release Security Patches
Asus and Zoom release security patches for router firmware and Windows client.
- 11 Nov 2026CISA flags Cisco BroadWorks flaw as actively exploited in attacks
CISA flags Cisco BroadWorks vulnerability CVE-2026-20320 as actively exploited.
- 11 Nov 2026Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities
Threat actors exploit Openwave and Cisco BroadWorks vulnerabilities to leak sensitive information.
- 10 Nov 2026Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
Microsoft's Patch Tuesday addresses 1,093 bugs, including one actively exploited Outlook vulnerability.
- 10 Nov 2026CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA adds six exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog.
- 5 Nov 2026Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws
Cisco and WatchGuard patch vulnerabilities; SonicWall will not fix GMS flaws.
- 1 Nov 2026Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 602 covers diverse cyber threats including CISA alerts, malware, and nation-state
- 30 Oct 2026Operationalizing CISA AA26-194A: Automating Cisco Router Security Assessments with Qualys Policy Audit
Qualys Policy Audit automates Cisco router security assessments based on CISA AA26-194A guidance.
- 29 Oct 2026Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
APT group UAT-11473 exploits Cisco SD-WAN auth-bypass flaw to deploy KeyDrift malware.
- 29 Oct 2026Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
Chinese hackers exploit VMware ESX zero-day and chain Linux kernel bugs to root servers and firewalls.
Indicators from these storieslatest 30 of 650 · show· hide
Vendor Watch
Run Cisco?
Get an email when a new story names Cisco, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
From Cisco
Is this your company, or did we get something wrong?
Tell us what to fix on this page: a product, a description, a link or a review. We check every suggestion before changing anything, and listing stays free and editorial.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.