Cisco is honored to mark our 10th year building and safeguarding the network for Black Hat Europe in London, as the Official Security Cloud Provider and a proud partner of the Black Hat NOC (Network Operations Center)—the longest-standing partnership of its kind.
We work with other official providers to bring the hardware, software and engineers to build and secure the Black Hat Europe network: Arista, Corelight, Jamf and Palo Alto Networks.
The primary goal of the NOC is to maintain uninterrupted network stability. In addition, partners provide seamless security, comprehensive visibility, and automation by integrating a SOC (Security Operations Center) within the NOC—established at the ExCel Conference Centre in just three days.
Attendees could monitor real-time network traffic volume and security status on partner dashboards displayed on screens outside the NOC during visiting hours.
Since 2016, Cisco has protected the Black Hat Europe network, beginning with automated malware analysis using Threat Grid. Over the years, Cisco’s involvement has grown to meet the conference’s evolving needs by incorporating additional components of the Cisco Security Cloud into both network and security operations.
Black Hat handpicks its network and security partners, with NOC participation available by invitation only to ensure both diversity and a spirit of full collaboration. Our NOC team brings together a range of technologies and organizations, all committed to continuous innovation and seamless integration to deliver a robust, comprehensive SOC cybersecurity architecture.
New for Black Hat Europe, we integrated Arista CloudVision and CV-CUE into Duo Directory SSO. We also added Jamf Pro Server MDM, as they started the official partnership in London.
The NOC leadership enabled Cisco and other partners to introduce additional pre-approved software and hardware solutions, enhancing our internal efficiency and expanding our visibility capabilities. However, Cisco is not the official provider for Extended Detection & Response, Security Event and Incident Management, Firewall, Network Detection & Response or Collaboration.
- Cisco XDR: Threat Hunting / Threat Intelligence Enrichment / Executive dashboards / Automation with Webex. The Cisco XDR Command Center dashboard tiles made it easy to see the status of each of the connected Cisco Security technologies (check out the Rene Straube’s threat hunting blog).
- Cisco XDR Analytics (Formerly Secure Cloud Analytics/Stealthwatch Cloud): Network traffic visibility and threat detection.
- Splunk Cloud Platform and Splunk Enterprise Security: Integrations and dashboards
- Cisco Webex: Incident notification and team collaboration
In addition, we deployed proof of value tenants for security:
We appreciate alphaMountain.ai, Pulsedive and StealthMole donating full licenses to Cisco, for use in the Black Hat Europe 2025 NOC.
Learn More About Cisco at Black Hat Europe
Explore deeper insights into innovation, threat hunting, and integrations by diving into our Black Hat Europe blogs, where we highlight advanced SOC practices, Cisco XDR and Splunk Enterprise Security collaborations, and the latest security cloud innovations showcased at Black Hat events. These blogs provide detailed coverage of how integrated telemetry, automated alerting, and AI-powered analytics enhance threat detection and response capabilities for security teams.
We are already planning for more innovation at Black Hat Asia, held in Singapore next April 2026.
Acknowledgements
Thank you to the Cisco NOC/SOC team:
- Security Cloud Innovation: Ryan Maclennan
- Integrations: Ivan Berlinson
- Breach Protection: Rene Straube and Piotr Jarzynka
- User Protection: Rob DeCooman
- ThousandEyes: Roberto D’Amato and Susheela Francis
- Splunk Incident Response Manager: Tony Iacobelli
- MDM Expert: Paul Fidler
- Remote Team: Adi Sankar
Also, to our NOC partners Palo Alto Networks (especially James Holland and Jason Reverri), Corelight (especially Mark Overholser and Eldon Koyle), Arista Networks (especially Landon Harsh), Jamf (especially Adam Derrick) and the entire Black Hat / Informa Tech staff (especially Grifter ‘Neil Wyler’, Bart Stump, Steve Fink, James Pope, Michael Spicer, Jess Jung and Steve Oldenbourg).
About Black Hat
Black Hat is the cybersecurity industry’s most established and in-depth security event series. Founded in 1997, these annual, multi-day events provide attendees with the latest in cybersecurity research, development, and trends. Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more. As the event series where all career levels and academic disciplines convene to collaborate, network, and discuss the cybersecurity topics that matter most to them, attendees can find Black Hat events in the United States, Canada, Europe, Middle East and Africa, and Asia. For more information, please visit the Black Hat website.
We’d love to hear what you think! Ask a question and stay connected with Cisco Security on social media.
Cisco Security Social Media

Deixe o seu comentário