Cisco SOC at Splunk .conf26 replays Endace packet captures against new Talos rules for JFrog Artifactory CVE-2026-82329; no exploitation found
Cisco's Agentic SOC team at Splunk .conf26 showed how retrospective packet replay can check for past zero-day exploitation. They used full line-rate packet capture from Endace, intrusion detection on Cisco Secure Firewall Threat Defense (FTD), and rule updates from Cisco Talos. The scenario was Talos releasing new rules for CVE-2026-82329…