Latest News & Updates on Splunk Phantom

Splunk's Enterprise Security Premier edition has achieved FedRAMP Moderate certification, ensuring compliance with stringent federal security controls. This certification allows federal agencies to u...tilize ES Premier's advanced capabilities, including security orchestration and automated threat analytics, to enhance data integrity and security. Splunk also expands access to its Edge Processor and Ingest Processor for FedRAMP Moderate customers on AWS GovCloud.
Show More..

Splunk disclosed a critical remote code execution vulnerability (CVE-2026-20253) in Splunk Enterprise, affecting versions prior to 10.2.4 and 10.0.7. The vulnerability allows unauthenticated attacker...s to exploit the PostgreSQL sidecar service via Splunk Web, potentially leading to arbitrary code execution. Users are advised to upgrade to patched versions and implement security measures to mitigate risks.
Show More..

A critical vulnerability, CVE-2026-20253, in Splunk Enterprise versions 10.0.0-10.0.6 and 10.2.0-10.2.3, allows unauthenticated remote code execution via the PostgreSQL Sidecar Service. The flaw is a...ctively exploited, necessitating urgent upgrades to versions 10.2.4 or 10.0.7. Organizations should disable the PostgreSQL Sidecar Service if immediate upgrades are not possible, although this may impact certain workflows.
Show More..

Splunk has disclosed a critical vulnerability, CVE-2026-20253, affecting its Enterprise and Cloud platforms. This flaw allows unauthenticated remote code execution due to missing authentication contr...ols in the PostgreSQL sidecar service. Rated with a CVSS score of 9.8, it poses a severe threat to unpatched systems. Splunk advises immediate patching to secure environments against potential exploits.
Show More..

A critical vulnerability in Splunk Enterprise, CVE-2026-20253, has been added to the U.S. CISA's Known Exploited Vulnerabilities catalog. This flaw allows unauthenticated remote attackers to manipula...te files on affected systems. Splunk urges immediate upgrades to patched versions to mitigate risks.
Show More..

Splunk Enterprise is facing an active attack due to a critical vulnerability (CVE-2026-20253) that allows unauthenticated remote code execution. The flaw, found in versions below 10.2.4 and 10.0.7, c...an lead to full system compromise. Splunk has released patches and recommends upgrading to fixed versions to mitigate risks.
Show More..

Splunk has patched a critical vulnerability in Splunk Enterprise, identified as CVE-2026-20253, which allows unauthenticated attackers to exploit a PostgreSQL sidecar service endpoint. The vulnerabil...ity affects versions 10.2 before 10.2.4 and 10.0 before 10.0.7. Organizations are urged to update to the fixed versions to mitigate risks.
Show More..

Splunk disclosed a critical security vulnerability (CVE-2026-20253) in Splunk Enterprise, allowing unauthenticated remote code execution. The flaw, with a CVSS score of 9.8, affects specific versions... and requires urgent patching. The vulnerability involves an unauthenticated arbitrary file creation flaw in the PostgreSQL sidecar service. Organizations are advised to apply patches immediately to mitigate potential exploitation.
Show More..

CISA added a critical vulnerability in Splunk Enterprise, CVE-2026-20253, to its Known Exploited Vulnerabilities Catalog. This flaw allows unauthenticated access to create or truncate files, posing a... significant risk to security infrastructure. Splunk has released patches for affected versions, emphasizing the need for immediate updates to maintain security integrity.
Show More..

Splunk has identified multiple security vulnerabilities in its AI Toolkit and Enterprise products, including critical issues that allow unauthorized command execution and data exfiltration. These vul...nerabilities are due to unsafe shell execution patterns, insecure default settings, and improper access controls. Users are advised to upgrade to the latest versions to mitigate these risks.
Show More..

A critical vulnerability in Splunk, CVE-2026-20253, is being actively exploited. The flaw allows unauthorized file operations via a PostgreSQL sidecar service. Splunk urges customers to upgrade to fi...xed versions. CISA added the flaw to its Known Exploited Vulnerabilities catalog, requiring federal agencies to patch within three days.
Show More..

Splunk has addressed multiple vulnerabilities in its products, including Python for Scientific Computing, Splunk AI Toolkit, and Splunk SOAR, by upgrading third-party packages and releasing new versi...ons. These updates enhance security by remedying various CVEs, ensuring compliance with the National Vulnerability Database ratings.
Show More..

Splunk released OpenTelemetry Collector v0.154.0, removing legacy components to reduce software size and security risks. This update marks a shift from older technologies to native OpenTelemetry capa...bilities, enhancing observability. Splunk continues to invest in OpenTelemetry, focusing on modernizing its data collection tools and improving DNS monitoring.
Show More..

Splunk has released emergency security updates for a critical vulnerability in Splunk Enterprise, tracked as CVE-2026-20253, with a CVSS score of 9.8. The flaw allows unauthenticated users to execute... arbitrary code, posing significant risks to enterprises using the platform for security monitoring. The vulnerability affects specific versions of Splunk Enterprise, but not Splunk Cloud.
Show More..

A critical vulnerability (CVE-2026-20253) in Splunk Enterprise versions 10.0.x and 10.2.x allows unauthenticated file operations, potentially leading to remote code execution. Splunk advises immediat...e patching to versions 10.0.7 and 10.2.4 to mitigate risks. The flaw involves a PostgreSQL sidecar service endpoint lacking authentication controls.
Show More..

Splunk has released emergency security updates for Splunk Enterprise to address a critical vulnerability, CVE-2026-20253, which allows unauthenticated remote code execution. The flaw affects versions... 10.0.0-10.0.6 and 10.2.0-10.2.3, with a CVSS score of 9.8. Organizations are urged to update to versions 10.0.7 and 10.2.4 immediately to mitigate risks.
Show More..

Multiple vulnerabilities have been identified in Splunk products, including Splunk Enterprise and Splunk Cloud Platform, which could lead to security restriction bypass, information disclosure, and c...ross-site scripting. A specific vulnerability, CVE-2026-20253, is being actively exploited. Splunk has issued advisories and fixes to address these issues.
Show More..

Splunk has introduced Exposure Analytics in its Enterprise Security platform, enhancing asset and identity management through continuous entity discovery. This feature integrates real-time and schedu...led data sources, improving security operations by providing a comprehensive view of assets and users. It reduces manual updates and enriches security investigations with accurate context.
Show More..

Splunk disclosed critical vulnerabilities in its Enterprise, Cloud Platform, and Secure Gateway app, including CVE-2026-20253, which allows unauthenticated file operations. Immediate patching is advi...sed to prevent potential infrastructure compromise. Orca Security offers tools to identify and prioritize remediation for affected Splunk installations.
Show More..

Splunk and Palo Alto Networks released patches for critical vulnerabilities in their products. Splunk addressed a severe flaw in Splunk Enterprise, CVE-2026-20253, allowing unauthenticated file opera...tions. Additional fixes were made for high-severity issues in Splunk Enterprise and SOAR, enhancing security against remote code execution and data exfiltration.
Show More..

Splunk has launched the Observability Cloud Playground, a pre-configured demo environment that allows users to explore observability features without setup or coding. It includes pre-built dashboards..., service maps, and guided workflows, enabling users to quickly understand monitoring and troubleshooting capabilities. The Playground is designed to reduce the time to value for new users, offering a secure, read-only environment for experimentation.
Show More..

Splunk has released IT Service Intelligence (ITSI) 5.0, enhancing IT operations with new features like AI-powered service and KPI discovery, improved alert integrations, and a modernized user experie...nce. The update focuses on reducing alert noise and speeding troubleshooting with AI-driven event correlation and enriched data integration, aiming to connect service health with business impact.
Show More..

Splunk has introduced AI Agent Monitoring within its Observability Cloud, enhancing its Application Performance Monitoring (APM) capabilities. This feature provides visibility into AI agent and model... performance, allowing teams to troubleshoot issues with trace-level insights. It integrates with Cisco AI Defense for risk mitigation and aligns with AGNTCY standards to ensure vendor-neutral telemetry capture for AI applications.
Show More..

Splunk launched a free edition of its Observability Cloud, offering 15 hosts with full platform features, aimed at developers and startups. This edition provides enterprise-grade observability tools ...without procurement barriers, enhancing application performance monitoring and security threat detection.
Show More..

Multiple vulnerabilities have been identified in Splunk products, including Splunk Enterprise, Splunk Cloud Platform, and Splunk AI Toolkit. These vulnerabilities could allow remote attackers to expl...oit systems, leading to information disclosure, security restriction bypass, and denial of service. Users are advised to apply the fixes provided by Splunk to mitigate these risks.
Show More..

Splunk, a Cisco company, released a research report titled "The Hidden Costs of Downtime," highlighting that unplanned downtime costs Global 2000 companies $600 billion annually. The study, conducted... with Oxford Economics, emphasizes the severe financial impact of downtime, including $15,000 per minute in costs and a 3.4% average stock price drop. The report underscores the importance of resilience, end-to-end visibility, and AI in mitigating these issues.
Show More..

Splunk, now a Cisco company, released a study titled "The Hidden Costs of Downtime," revealing that downtime costs for Global 2000 companies have surged to $600 billion annually. The study highlights... the severe financial impact of downtime, including a $15,000 per minute cost and a 3.4% average stock price drop. It emphasizes the importance of aligning technology with business outcomes to enhance resilience.
Show More..

Splunk has launched Splunk Cloud Platform 10.4 and Splunk Enterprise 10.4, introducing Federated Search, which allows data analysis across hybrid and multi-cloud environments without data movement. T...he update includes enhancements like Splunk AI Assistant 2.0, improved dashboards, and modern navigation, enhancing security, performance, and scalability for enterprise and cloud customers.
Show More..

Splunk disclosed a high-severity security flaw (CVE-2026-20204) in its Enterprise and Cloud Platform, risking remote code execution. Affected versions are below 10.2.1 for Enterprise and 10.3.2512.5 ...for Cloud. Splunk advises upgrading or disabling Splunk Web as a workaround. The flaw highlights risks in security platforms, emphasizing the need for prompt patching.
Show More..

Splunk has released updates to address vulnerabilities in its Enterprise, Cloud Platform, and MCP Server. A critical flaw, CVE-2026-20204, in Splunk Enterprise and Cloud Platform could allow remote c...ode execution. Users should update to the latest versions to secure their systems. Additional fixes were applied to third-party packages and the MCP Server app.
Show More..

Expel has introduced a managed SIEM service for Microsoft Sentinel and Splunk Enterprise Security users. This service, available to Expel MDR customers, integrates Expel's detection engineers into ex...isting SIEM environments to enhance detection strategies and manage operational tasks. It aims to alleviate the burden on security teams by offering transparency and control over detection rules without requiring platform migration.
Show More..

Splunk has announced the general availability of Splunk Enterprise Security (ES) Premier for cloud customers, with customer-managed environments following soon. This AI-powered security platform inte...grates SIEM, SOAR, and UEBA to enhance threat detection and response. It aims to transform security operations by unifying workflows and automating routine tasks, enabling analysts to focus on strategic defense.
Show More..

Splunk introduces its AI Toolkit, designed to transform IT operations from reactive to predictive. The toolkit empowers users with AI and machine learning capabilities to predict incidents, uncover h...idden issues, and automate responses. It supports both no-code and pro-code environments, enhancing productivity and security within the Splunk ecosystem. The AI Toolkit aims to deliver digital resilience by integrating AI directly with data, reducing latency and costs.
Show More..

Splunk, a Cisco company, released its annual CISO Report highlighting the pivotal role of AI in enhancing cybersecurity. The report, surveying 650 global CISOs, emphasizes the growing importance of A...I governance and risk management. It reveals that 95% of CISOs view advanced threat actor capabilities as a major risk, while 92% note AI's role in improving threat detection and response.
Show More..

Splunk has launched its Cloud Platform on Google Cloud in Saudi Arabia, enhancing digital resilience and cybersecurity for local enterprises. This move aligns with Saudi Arabia's Vision 2030, offerin...g organizations a secure, scalable, and localized cloud environment. The platform integrates observability and security, enabling faster issue detection and operational excellence.
Show More..

Splunk Cloud Platform has received the DESC Cybersecurity Certification from the Dubai Electronic Security Center, meeting stringent cybersecurity and compliance standards. This certification enhance...s Splunk's credibility as a secure cloud service provider, supporting Dubai's digital transformation and enabling government and critical sectors to adopt its platform with confidence.
Show More..

Cisco has launched the Splunk Observability Cloud on AWS in Singapore, enhancing IT operations with real-time visibility and data control. This deployment aids industries in meeting regulatory and da...ta retention needs while maintaining system performance and resilience. The solution offers unsampled insights across infrastructure and applications, supporting innovation and strategic business initiatives.
Show More..

Splunk Wants to Outdo LLMs to Teach AI How to Read Machine Data

Splunk unveiled its AI-driven Security Operations Center (SOC) at its annual .Conf conference, introducing agent-driven tools to enhance cybersecurity operations. The new Enterprise Security Basic an...d Advanced Editions integrate features like Splunk SOAR and UEBA, aiming to simplify workflows and improve threat detection and response. This launch, following Splunk's merger with Cisco, marks a significant advancement in security technology, promising improved efficiency and proactive defense capabilities.
Show More..

Splunk Unveils New Security Editions

Gigamon has launched Gigamon Insights, an AI-powered application integrated with platforms like AWS, Elastic, and Splunk. This tool enhances security and IT operations by providing network-derived te...lemetry insights, aiding in threat detection and compliance. The integration with Splunk allows users to leverage AI for improved security workflows, accelerating detection and response times.
Show More..

Splunk has introduced new AI-powered features in its Enterprise Security 8.2, enhancing threat detection and response capabilities. The update includes two editions, Essentials and Premier, integrati...ng AI to streamline security operations and reduce analyst workload. Key features include AI-driven triage, malware reversal, and personalized detection. These advancements aim to unify security workflows and improve efficiency in Security Operations Centers (SOCs).
Show More..

Dataminr has integrated its Agentic AI capabilities into its Dataminr Pulse for Splunk SIEM and Splunk SOAR, enhancing real-time threat detection and response. This integration empowers cybersecurity... teams with updated threat intelligence and context-rich assessments, improving their ability to manage cyber risks effectively.
Show More..

Cisco has introduced AI-powered enhancements to Splunk Observability, aimed at providing real-time insights and strengthening enterprise resilience. The updates, revealed at Splunks .conf25 event, in...clude AI Troubleshooting Agents and Event iQ in Splunk IT Service Intelligence, which automate incident response and reduce alert noise. These features, integrated with Cisco technologies, offer improved system reliability and reduced operational risks.
Show More..

Splunk, during its .conf25 event, announced significant upgrades to its Enterprise Security (ES) platform, introducing two new options: Splunk Enterprise Security Essentials and Premier. These enhanc...ements integrate AI agents to automate complex workflows, including malware triage and SOAR playbook creation, aiming to unify the SOC experience. The Premier edition adds Splunk SOAR and UEBA capabilities, promoting a seamless user experience with Cisco's SOC vision.
Show More..

Splunk has launched an agentic AI-powered upgrade for its Observability Cloud and Splunk AppDynamics. This innovation aims to transition enterprises from reactive monitoring to proactive resilience b...y embedding AI that analyzes telemetry, flags anomalies, and recommends fixes. The upgrade focuses on AI integrations, enabling organizations to monitor AI agent performance and infrastructure usage, ensuring efficiency and cost-effectiveness. This positions Splunk as a leader in AI-driven enterprise observability.
Show More..

Splunk and Cisco have collaborated to develop the Cisco Data Fabric, powered by the Splunk Platform, to enhance operational clarity and efficiency through agentic operations. This joint effort aims t...o transform enterprise operations by integrating AI to manage data across security, IT, observability, and network environments, enabling faster and more informed decision-making.
Show More..

Cisco has integrated Qmulos compliance and analytics solutions into its SolutionsPlus Partner Program, enhancing their availability through Cisco channels with improved integration within the Splunk ...platform. This move strengthens Cisco's software and security offerings by automating compliance processes, benefiting both customers and partners. The integration is set to standardize Splunk-based compliance workflows among Cisco's clients.
Show More..

Cisco Systems is integrating Splunk's software to enhance its AI infrastructure, providing a unified view of networking and security. This integration supports Cisco's shift towards AI-focused soluti...ons, aiming to capitalize on the growing demand for high-bandwidth AI applications.
Show More..

Resecurity has launched a native integration with Splunk, available on the Splunkbase platform, to enhance cyber threat intelligence capabilities. This integration allows organizations to incorporate... advanced threat intelligence into their Splunk SIEM and SOC environments, improving threat detection and response processes. The integration supports standard protocols like TAXII and offers flexible configuration options for diverse organizational needs.
Show More..

Resecurity has launched a native integration with Splunk, available via a dedicated app on Splunkbase. This integration allows organizations to connect Resecurity's cyber threat intelligence with Spl...unk's ecosystem, enhancing security event analysis through the ingestion of threat intelligence feeds using the TAXII protocol. The app supports Splunk Enterprise environments, facilitating improved data analysis and threat visibility.
Show More..

Resecurity has launched a native integration with Splunk, available via a dedicated app on Splunkbase. This integration allows organizations to incorporate Resecurity's cyber threat intelligence into... Splunk's SIEM, enhancing security event analysis through the ingestion of threat intelligence feeds. The app supports industry-standard protocols like TAXII, facilitating enriched data analysis and improved security operations.
Show More..

Splunk and AWS have integrated their security tools, enabling faster access to critical security insights. This collaboration allows AWS Security Hub findings to flow into Splunk in real-time, reduci...ng alert noise and enhancing threat detection. The integration aims to provide a unified security approach, empowering organizations to better protect their assets and drive innovation.
Show More..

At Cisco Live Amsterdam 2026, Cisco introduced new integrations with Splunk, including a Splunk integration wizard and Advanced Logging for Cisco Secure Firewall. These enhancements simplify syslog c...onfiguration and provide detailed logging capabilities, allowing for better monitoring and analysis of network traffic. The collaboration highlights the synergy between Cisco's firewall technology and Splunk's SIEM solutions.
Show More..

TekStream, a certified Splunk partner, will present at Splunk Go Austin on March 11, discussing strategies to enhance SOC efficiency using Splunk's ecosystem. The session will focus on reducing execu...tive escalations by aligning alerts with business impact, emphasizing containment over detection, and translating Splunk data into resilience metrics. TekStream's expertise in Splunk solutions has earned them multiple partner awards and recognition.
Show More..

Cisco integrates Splunk's AI Agent Monitoring tool into its Observability Cloud, enhancing its AI Defense suite. This tool visualizes agent workflows and tracks performance, cost, and behavior of LLM... and agentic applications. Cisco plans further integration with its AI Canvas and Cloud Control, set to launch later in 2026.
Show More..

Cisco is integrating Splunk into its new "Cisco 360 Partner Program," enhancing Splunk's channel strategy amidst growing demand for IT monitoring solutions.

Splunk and the Australian Signals Directorate have partnered to launch a CTIS cyber plug-in, integrating Splunk's Enterprise Security platform with ASD's Cyber Threat Intelligence Sharing system. Thi...s integration, mandatory for federal agencies by July 2025, enhances real-time cyber threat intelligence exchange, improving detection and response times. The plug-in is also available to private sector critical infrastructure operators.
Show More..

Cisco has unveiled its Data Fabric vision with Splunk at its core, highlighting a major collaboration between the two companies. The Cisco Data Fabric integrates Cisco hardware and Splunk software to... deliver a scalable AI-centric platform for predictive insights and proactive resilience. This initiative includes new capabilities such as federated search and analytics, and a partnership with Snowflake, enhancing data correlation and analysis. The collaboration emphasizes Splunk's role in Cisco's future strategy, offering cost reductions and advanced AI features.
Show More..

Smarttech247 has been elevated to Elite Partner status in the Splunk Partnerverse Programme. This advancement from Premier Partner status highlights Smarttech247's expertise in integrating Splunk SIE...M and SOAR into its VisionX MDR solution, enhancing cybersecurity services. The partnership aims to improve customer resilience and visibility within Splunk's client base.
Show More..

Splunk's integration into Cisco's operations following its $28 billion acquisition is reshaping its channel strategy. Splunk's channel unit will merge with Cisco's global partner sales, and the Splun...k Partnerverse program will transition into Cisco's 360 Partner Program in 2026. Splunk will remain a distinct business unit within Cisco, focusing on deeper product integrations like Cisco Data Fabric and Splunk Cloud's integration with Cisco's AI Canvas.
Show More..

Since Cisco's $28 billion acquisition of Splunk, the integration of Splunk's machine data analytics with Cisco's networking products has accelerated platform expansion. This synergy has led to the cr...eation of Cisco Data Fabric, enhancing AI-centric solutions. Splunk's strategy remains focused on leveraging Cisco's strengths to address data silos and improve observability through initiatives like Splunk Federated Search for Snowflake.
Show More..

Splunk Inc. reported its fiscal second quarter 2014 financial results, highlighting a 50% year-over-year revenue growth to $66.9 million. The company also announced the beta version of Hunk: Splunk A...nalytics for Hadoop and the general availability of the latest Splunk App for VMware. Splunk crossed the 6,000 customer mark, adding over 400 new customers, including major organizations like Bank of the West and Sony Corporation.
Show More..

Splunk Cloud Platform has been awarded the DESC Cybersecurity Certification by the Dubai Electronic Security Center, marking a significant milestone for Splunk in the UAE. This certification ensures ...that Splunk meets the highest cybersecurity and compliance standards, facilitating adoption by government and critical sectors in Dubai. It enhances trust in Splunk's services, supporting secure digital transformation across public and private sectors.
Show More..