Cisco Systems is innovating its Extended Detection and Response (XDR) solutions by adding an automated ransomware attack review feature to its solutions.

Cisco announced on the 3rd that it plans to strengthen the capabilities of its security solutions by adding recovery functions to the response process of its XDR solution, enabling business operating systems to be recovered in near real-time after a ransomware attack.

Cisco is leading continuous security technology innovation based on its AI-based integrated cross-domain security platform, 'Cisco Security Cloud'.

For example, at the RSA Conference 2023 held in San Francisco last April, Cisco launched XDR, providing deep telemetry capabilities across networks and endpoints to enhance visibility. This solution supports enhanced business continuity by enabling the saving of critical information as snapshots almost simultaneously with the occurrence of ransomware.

Jeetu Patel, Vice President and General Manager of Security and Collaboration at Cisco, stated, “Ransomware and cyber attacks are surging, and a platform-level approach is necessary to respond effectively.” "Cisco, a global network infrastructure provider, aims to build an open and highly resilient cybersecurity platform that prepares for ransomware attacks and minimizes damage, ensuring no disruption to business operations," the company stated. "Security solution innovations, such as ransomware recovery automation, play a critical role in applying security insights to business operations, enabling true integrated detection, response, and data recovery," they added.

The Cisco Talos Incident Response (IR) team was involved in more ransomware cases through the second quarter of 2023 than it had in the previous year. With new features in Cisco XDR, Security Operations Centers (SOCs) can automatically detect critical business data, save snapshots, and restore it at the moment signs of a ransomware attack appear. Furthermore, this feature activates before ransomware moves through the network into the internal network to access high-value assets, thereby preventing damage. Cisco XDR is available globally for simplified security operations in today's hybrid, multi-vendor, multi-threat environments.

As part of the expansion of XDR's third-party solution integration, Cisco also announced an integrated solution with DataProtect and DataHawk, solutions from the DRaaS (Disaster Recovery as a Service) company Cohesity. This is the first data security-related third-party XDR integration solution introduced by Cisco.

Cohesity's products have demonstrated innovative performance in data backup and recovery capabilities, providing configurable recovery points and mass recovery for systems assigned to protection plans. Building on these capabilities, the new integrated solution launched with Cisco offers even more advanced functionality by retaining potentially infected virtual machines for future forensic investigations while protecting data and workloads in the rest of the environment. Cohesive engineers collaborate with Cisco technical teams to dynamically adjust data protection policies, helping enterprises establish a more robust security foundation. This feature synergizes with Cisco XDR's powerful detection, correlation, and integrated response capabilities to enable customers to rapidly protect and automatically recover data.

Sanjay Poonen, CEO and Chairman of Cohisity, stated, “Cybersecurity is now a critical issue of concern even at the board level within companies, and all CIOs and CISOs bear a heavy responsibility for reducing the risk of cyberattacks. Accordingly, Cohisity plans to contribute to strengthening the cyber resilience of companies worldwide through our partnership with Cisco.” He added, “The launch of this first-ever proactive response solution is an important step in realizing Cohisity’s vision for data security and management, and we are pleased to be able to make new strides in the industry together with Cisco.”