Cisco Powers Black Hat USA with Live SOC Visibility

Cisco returned to Black Hat USA in 2026 as the Official Security Cloud Provider and longest-standing partner of the Black Hat Network Operations Center (NOC) and Security Operations Center (SOC). For its 11th year, Cisco worked side by side with NOC leaders and official technology partners Palo Alto Networks, Arista, Corelight, Jamf, and Lumen to protect the conference network.

The NOC/SOC's first mission is straightforward: keep the conference network operating safely and reliably. This unique environment brings together various groups, including training courses, security researchers, vendors, partners, press, attendees, and a range of personal and managed devices. The Black Hat NOC/SOC serves as a powerful proving ground for security operations due to its blend of expected and unexpected activity.

Cisco and Splunk's work focused on live NOC/SOC visibility, detection engineering, threat hunting, malware analysis, AI protection, and the development of Agentic SOC. They aimed to learn, validate, and build on their experiences at the event, which will carry forward into Cisco GSX and Splunk .conf26.