Cisco Continues to Drive Innovation to Reimagine Security for the AI Era

Rhea-AI Summary

Cisco (NASDAQ: CSCO) has announced major security innovations to address AI-era challenges, revealed at RSA Conference 2025. The company's 2025 Cybersecurity Readiness Index shows 86% of organizations experienced AI-related security incidents in the past year.

Key announcements include:

• Enhanced Cisco XDR with new AI-powered features like Instant Attack Verification, automated XDR Forensics, and XDR Storyboard for faster threat detection
• Integration with Splunk Security through Enterprise Security 8.1 and SOAR 6.4 for improved threat detection
• Partnership deepening with ServiceNow for AI risk management
• Launch of Foundation AI team, introducing the first open-source reasoning model for security applications
• New AI Supply Chain Risk Management controls to secure AI application artifacts
• Enhanced Industrial IoT Security Solutions with Cisco Industrial Threat Defense improvements

Positive

• Launch of innovative AI-powered security features through Cisco XDR
• Strategic partnership expansion with ServiceNow for AI security
• Introduction of Foundation AI team and open-source security tools
• Enhanced Industrial IoT security capabilities

Negative

• 86% of organizations reported AI-related security incidents, indicating significant vulnerabilities
• Growing complexity in threat landscape and expanding talent shortage

Insights

Technology Security Expert

Cisco bolsters AI security portfolio with advanced threat detection, ServiceNow partnership, open-source tools, and industrial IoT protections addressing documented market vulnerabilities.

Cisco's new security innovations represent a strategic response to a documented vulnerability landscape, with their own research revealing 86% of organizations experienced AI-related security incidents in the past year. The company is tackling this challenge through multiple dimensions of their security portfolio.

The XDR (Extended Detection and Response) enhancements introduce substantive capabilities that address real operational challenges. The Instant Attack Verification feature leverages agentic AI to automatically create investigation plans by correlating data across multiple security domains—a significant advancement in threat confirmation efficiency. Similarly, the automated XDR Forensics capabilities enable deeper endpoint visibility, while the XDR Storyboard visualization tool helps security teams rapidly comprehend complex attack patterns.

The integration with Splunk Security (ES 8.1 and SOAR 6.4) creates a more unified security operations approach, expanding threat detection capabilities across network environments. Customer validation from Port53's CEO confirms real-world operational impact of these enhancements.

Particularly noteworthy is Cisco's dual approach to AI security: their commercial AI Defense offering (now integrated with ServiceNow SecOps) alongside the new Foundation AI initiative, which introduces the first open-source reasoning model built specifically for security applications. This balanced commercial/community strategy addresses both immediate enterprise needs while contributing to broader security ecosystem advancement.

The AI Supply Chain Risk Management controls tackle a frequently overlooked vulnerability—the security of AI models and datasets before deployment—by providing detection and policy enforcement against malicious model files and risky open-source licenses.

Lastly, the industrial IoT security enhancements integrate Cisco Cyber Vision with vulnerability management tools, firewalls, and Splunk OT Security, addressing the growing convergence of IT and OT security requirements in critical infrastructure environments.

Financial Analyst

Cisco strengthens recurring revenue potential through AI security innovations and key partnerships, addressing documented market needs in high-growth cybersecurity sectors.

Cisco's comprehensive security announcements align strategically with the company's ongoing transformation from hardware-centric to software and services-driven revenue streams. The breadth of innovations spans its entire security portfolio, addressing key growth areas including AI security, threat detection/response, and industrial infrastructure protection.

The XDR enhancements focus on operational efficiency for security teams—a critical selling point given the industry's talent shortage. The agentic AI capabilities directly address the detection-to-response gap that security operations centers struggle with, potentially positioning these features as premium-tier offerings in Cisco's security subscription services.

The deepened ServiceNow partnership creates strategic ecosystem advantages, integrating Cisco's AI Defense with ServiceNow SecOps. This cross-platform integration strengthens Cisco's enterprise stickiness, particularly among large organizations already invested in both vendors' platforms, while addressing the governance and risk management aspects of AI adoption.

Cisco's Foundation AI initiative (developed from their Robust Intelligence acquisition) signals commitment to both commercial products and open-source security leadership. While open-source tools don't generate immediate revenue, they establish thought leadership that typically drives downstream commercial adoption.

The industrial IoT security enhancements extend Cisco's addressable market into critical infrastructure and industrial networks—sectors with increasing security spending requirements due to regulatory pressure and escalating threats. These integrations between Cisco Cyber Vision and other security tools create cross-selling opportunities across Cisco's portfolio.

Notably, the cited 86% statistic about AI-related security incidents establishes clear market demand for these solutions, supported by validation from both customer and analyst quotes included in the announcement.

News Summary:

• New Cisco innovations address the complexities for security professionals to embrace the AI era in today's dynamic threat landscape
• Cisco XDR and Splunk Security advancements simplify threat detection and response with cutting edge agentic AI
• Cisco and ServiceNow deepen partnership to ensure customers can efficiently adopt and scale AI securely
• Launch of Foundation AI democratizes AI security with novel open-source tools, including the first reasoning model built to enhance security applications

SAN FRANCISCO, April 28, 2025 /PRNewswire/ -- RSA CONFERENCE 2025 -- Cisco (NASDAQ: CSCO) today made several transformative innovation and partnership announcements that will help security professionals secure and harness the power of AI. An increasingly sophisticated threat landscape combined with an expanding talent shortage means the need has never been greater for machine scale security and response. According to Cisco's upcoming 2025 Cybersecurity Readiness Index, companies worldwide underestimate the complexities of securing AI, with 86% saying their organizations have experienced AI-related security incidents in the past 12 months. Cisco's announcements further its commitment to developing these capabilities for customers through ecosystem partnerships and for the broader community through open-source security models and tooling.

"The cybersecurity threat landscape has never been more dynamic and complex, with adversaries constantly emboldened and enabled by AI to drive new attacks and exploits," said Jeetu Patel, Executive Vice President and Chief Product Officer, Cisco. "To fight back, understaffed security operations and IT leaders need AI power of their own. Cisco is continuing its mission to secure AI and leverage AI for security with novel open-source models and tools, new AI agents, and IoT advancements, alongside the full breadth of the Cisco Security Cloud. Together, these innovations will help level the playing field and deliver AI innovation that makes all businesses more secure."

Improved Threat Detection and Response with Cisco XDR and Splunk Security
Security teams are inundated with thousands of threat alerts daily. Cisco XDR addresses this challenge by correlating telemetry across network, endpoint, cloud, email, and more, using agentic AI to surface what matters most to organizations. Integrating several new features, Cisco XDR will deliver decisive, AI-powered responses to stop attacks faster than ever. The new Instant Attack Verification integrates data from the Splunk platform, endpoints, networks, threat intelligence, and more – and uses agentic AI to automatically create and execute tailored investigation plans. This feature swiftly investigates, confirms threats, and enables security teams to automate responses with confidence to stop attacks. New automated XDR Forensics capabilities provide deeper visibility into endpoint activity, increasing the accuracy of investigations. Additionally, a new XDR Storyboard clearly visualizes complex attacks, empowering security teams to understand threats in seconds and decisively respond faster.

To further help organizations strengthen their digital resilience, Splunk Enterprise Security (ES) and Splunk SOAR 6.4 enhance defenses against known and unknown threats for better visibility, accurate detections, and integrated and automated workflows that increase efficiency. Organizations that combine Splunk ES and SOAR with Cisco XDR will gain enhanced network visibility and detection to expedite investigations and stay ahead of threats. With this breadth of solutions, Cisco helps organizations build a SOC of the future that harnesses agentic AI to identify threats faster, accelerate resolutions, and realize massive productivity gains. Splunk SOAR 6.4 is generally available, and Splunk Enterprise Security 8.1 will be available in June.

"Cisco XDR has fundamentally changed how we deliver security services, and we're eager to leverage the enhancements in our vision for the future," said Omar Zarabi, CEO, Port53. "Building on its network-centric and open XDR approach, the emphasis on clarity, decisiveness, and speed – delivered through Instant Attack Verification powered by agentic AI, and automated XDR Forensics – will further streamline our operations and deliver even better results for our customers."

"Cisco XDR aims to address key challenges in the SOC with its focus on 'Clear Verdict. Decisive Action. AI Speed,'" said Frank Dickson, Group Vice President, Security & Trust, IDC. "The combination of Instant Attack Verification, XDR Storyboard visualizations, and automated XDR Forensics offers a streamlined approach to threat management. The effectiveness of these features in improving security outcomes will depend on real-world deployment and integration within existing security ecosystems."

Security for AI and AI for Security 
Building on the recent launch of AI Defense, Cisco is continuing its commitment to help customers tackle the growing challenges of managing AI security risks. Cisco announced a new integration as part of a deepened relationship with ServiceNow to enable confident and secure AI adoption at scale. The first integration will bring together Cisco AI Defense with ServiceNow SecOps to provide more holistic AI risk management and governance.

Cisco also introduced Foundation AI, a team of leading AI and security experts that joined through the Robust Intelligence acquisition, focused on developing cutting-edge technology to address the fundamental security issues of the AI era. The Foundation AI team today released the first open-source reasoning model built specifically for enhancing security applications. They will also debut novel benchmarks to evaluate cybersecurity models on real-world security use cases, plus additional tools and building blocks for teams to leverage in adapting the models. These models and tools will encourage collaboration among first-class security experts and machine learning engineers, while delivering essential infrastructure that cybersecurity teams can immediately leverage.

Additionally, a new set of AI Supply Chain Risk Management security controls will help customers secure AI application artifacts. Even before deploying models in production, enterprises are exposed to security vulnerabilities, like malware in AI model files and poisoned data sets, that are downloadable from open-source repositories. By combining AI model threat assessment and detection with comprehensive network enforcement, enterprises can confidently accelerate their AI adoption and innovation. This includes identifying and blocking malicious AI model files before they enter the enterprise; automatically detecting and blocking AI model files with risky or restrictive open-source software licenses that pose intellectual property and compliance risks; and flagging and enforcing policies against AI models originating from prohibited suppliers.

Enhanced Industrial IoT Security Solutions
As industry digitization accelerates and industrial AI emerges, critical infrastructure and industrial networks are constantly exposed to cyber threats. Enhancing the Cisco Industrial Threat Defense solution and further extending IT security to industrial settings, these new integrations with Cisco Cyber Vision include: Cisco Vulnerability Management and Splunk Asset and Risk Intelligence to help prioritize OT cyber risks; Cisco Secure Firewall to help automate industrial network segmentation to better protect operations; and the Splunk OT Security add-on in Splunk ES to unify IT and OT visibility within the SOC, helping detect threats traversing domains to secure global enterprises.

For more information on Cisco's new security solutions, visit cisco.com/go/security.

Additional Resources:

• Press Release: Cisco and ServiceNow Partner to Simplify and Secure AI Adoption for Businesses at Scale
• Blog: Navigating the AI Cybersecurity Revolution
• Blog: Cisco XDR Just Changed the Game, Again
• Blog: Foundation AI: Building the Intelligent Future of Cybersecurity
• Blog: Innovative OT Security Solutions by Cisco at RSAC 2025

About Cisco
Cisco (NASDAQ: CSCO) is the worldwide technology leader that is revolutionizing the way organizations connect and protect in the AI era. For more than 40 years, Cisco has securely connected the world. With its industry leading AI-powered solutions and services, Cisco enables its customers, partners and communities to unlock innovation, enhance productivity and strengthen digital resilience.  With purpose at its core, Cisco remains committed to creating a more connected and inclusive future for all. Discover more on The Newsroom and follow us on X at @Cisco.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at http://www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word 'partner' does not imply a partnership relationship between Cisco and any other company.

View original content to download multimedia:https://www.prnewswire.com/news-releases/cisco-continues-to-drive-innovation-to-reimagine-security-for-the-ai-era-302439192.html

SOURCE Cisco Systems, Inc.

FAQ

What new security features did Cisco (CSCO) announce at RSA Conference 2025?

Cisco announced AI-powered XDR enhancements, including Instant Attack Verification, automated XDR Forensics, and XDR Storyboard visualization, along with Foundation AI launch and new Industrial IoT security solutions.

How many organizations experienced AI-related security incidents according to Cisco's 2025 report?

According to Cisco's 2025 Cybersecurity Readiness Index, 86% of organizations worldwide experienced AI-related security incidents in the past 12 months.

What is the partnership between Cisco (CSCO) and ServiceNow focusing on?

The partnership focuses on integrating Cisco AI Defense with ServiceNow SecOps to provide more comprehensive AI risk management and governance capabilities.

What are the key features of Cisco's new AI Supply Chain Risk Management controls?

The controls include identifying and blocking malicious AI model files, detecting risky open-source software licenses, and enforcing policies against AI models from prohibited suppliers.

When will Splunk Enterprise Security 8.1 be available for Cisco (CSCO) customers?

Splunk Enterprise Security 8.1 will be available in June 2025, while Splunk SOAR 6.4 is already generally available.