Cisco Duo
“Cisco Duo secures workforce access and defends against advanced identity threats with IAM, phishing-resistant MFA, SSO, passwordless, and device trust.”
MFA and device trust, with support for passkeys and security keys.
Product pageCisco
United States4 products listed
Defend users, apps, and data against today's threats. Enable your agentic enterprise at scale with an open, network-native platform.
Our summaryNetworking company with a broad security portfolio including Duo, Umbrella and Secure Firewall. Its Talos team is one of the largest commercial threat research groups.
- Products listed
- 4
- Research stories
- 70
- Incidents and advisories
- 150
- Indicators
- 558
Cisco in our news, month by month
ResearchIncidents and advisories
14
17
May
4
32
Jun
10
11
Jul
10
12
Aug
13
26
Sept
5
8
Oct
Products and the controls they provide
Cisco Umbrella
“Cisco's enterprise network security provides advanced protection on a unified, cloud-delivered solution designed for the modern workplace.”
DNS-layer security and secure web gateway delivered from the cloud.
Product pageCisco Secure Firewall
“Cisco's Secure Firewall hardware and software options enhance your security to block more threats and swiftly respond to breaches.”
Next-generation firewalls with intrusion prevention, using Talos threat intelligence.
Product pageCisco AI Defense
“AI Defense is an end-to-end AI security solution that protects against the safety and security risks introduced by the development, deployment, and usage of AI.”
Discovery of AI use, testing of models and guardrails for AI applications.
Product pageExternal reviews
Independent tests, peer reviews and articles about Cisco. We link to them; we did not write or commission them, and nobody pays to appear here.
Research by Cisco
Stories in our coverage based on what researchers at Cisco found or reported: 70 in total.
- 15 Oct 2026Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
Silent Lynx targets CIS governments using WinRAR flaw and custom reverse shells.
- 15 Oct 2026Cisco Warns of Exploited Secure Email Gateway Vulnerability
Cisco warns of exploited critical vulnerability in Secure Email Gateway.
- 2 Oct 2026Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
China-nexus actor deploys new Antino backdoor targeting Asian government and policy organizations.
- 30 Sept 2026Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
Cisco warns of active exploitation of critical CVE-2026-76504 in SD-WAN Manager.
- 23 Sept 2026This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
Windows malware CLOSEDQUORUM uses AI models to vote on its next malicious action.
- 22 Sept 2026New ClosedQuorum Windows malware uses AI for attack decisions
New Windows malware ClosedQuorum uses AI models for autonomous attack decisions.
- 22 Sept 2026A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight
Cisco Talos unveils CAIRN framework to detect AI-driven malware, identifying CLOSEDQUORUM.
- 17 Sept 2026Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
Cisco warns of critical zero-day ISE auth bypass vulnerability (CVSS 10.0) actively exploited.
- 17 Sept 2026Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day
Cisco releases emergency patch for critical Cisco ISE zero-day vulnerability.
- 11 Sept 2026Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
Cisco FMC flaws exploited by threat actors for credential theft and Qilin ransomware deployment.
Incidents and advisories
Stories where a Cisco product had a vulnerability or was attacked, or Cisco itself was: 150 in total. Useful if you run its products.
- 15 Oct 2026Cisco Warns of Exploited Secure Email Gateway Vulnerability
Cisco warns of exploited critical vulnerability in Secure Email Gateway.
- 14 Oct 2026CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA adds four actively exploited vulnerabilities to its KEV Catalog.
- 8 Oct 2026Cisco Patches a Dozen Critical Vulnerabilities
Cisco releases patches for 35 vulnerabilities, including over a dozen critical bugs.
- 8 Oct 2026Cisco warns of critical flaws allowing Nexus switch takeover
Cisco warns of five critical NX-OS flaws allowing Nexus switch takeover and RCE.
- 1 Oct 2026CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV
CISA adds critical Cisco Catalyst SD-WAN Manager auth bypass (CVE-2026-76504) to KEV list due to active exploitation.
- 30 Sept 2026Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
Cisco warns of active exploitation of critical CVE-2026-76504 in SD-WAN Manager.
- 23 Sept 2026InfraTrust report warns network management systems under attack
Network management systems are increasingly targeted by attackers exploiting critical vulnerabilities.
- 21 Sept 2026⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
Weekly recap covers Cisco 0-day, AI agent RCE, ClickFix attacks, and browser hijacks.
- 18 Sept 2026Cisco Zero-Day Highlights API Endpoint Authentication Issues
Cisco ISE zero-day CVE-2026-76460 allows authentication bypass via API endpoints.
- 17 Sept 2026Cisco alerts customers to second actively exploited zero-day in as many days
Cisco alerts customers to second actively exploited zero-day in as many days.
Indicators from these storieslatest 30 of 558 · show· hide
Vendor Watch
Run Cisco?
Get an email when a reviewed story names Cisco, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
From Cisco
Is this your company, or did we get something wrong?
Tell us what to fix on this page: a product, a description, a link or a review. We check every suggestion before changing anything, and listing stays free and editorial.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.