Cisco's automated ransomware recovery turns crisis into control

Cisco is enhancing its Extended Detection and Response (XDR) system, incorporating recovery into the response process, to redefine customer expectations for security products.

The industry pioneer in business networking and security, Cisco, is significantly improving its Extended Detection and Response (XDR) system. Cisco XDR is altering the expectations of customers for security products by incorporating recovery into the response process. With today's announcement, company activities can recover from a ransomware assault almost instantly.

Cisco is still working to realize its goal of creating a single, AI-powered, cross-domain security platform called the Cisco Security Cloud. This year, during the RSA Conference, Cisco introduced Cisco XDR, which offered deep telemetry and unparalleled visibility throughout the network and endpoints. Now, Cisco XDR will further support that ambition and enable unprecedented levels of business continuity by cutting the critical time to almost zero between the start of a ransomware epidemic and taking a picture of business-essential information.

The Cisco Talos Incident Response (IR) team handled the most ransomware engagements in over a year during the second quarter of 2023. Security Operations Center (SOC) teams will be able to automatically detect, capture, and restore business-critical data at the first indication of a ransomware attack—often before the malware travels laterally over the network to reach high-value assets—thanks to the new capabilities in Cisco XDR.