Cisco has announced Live Protect, a runtime security capability embedded in NX-OS that uses eBPF to apply compensating controls to network infrastructure without reboots or disruptions. The feature addresses a growing crisis: AI models can now find and exploit vulnerabilities in complex infrastructure code bases at machine speed, compressing the time between disclosure and active exploitation. Live Protect is not a patch replacement but a temporary, Cisco-validated shield that blocks specific exploit paths until a permanent patch can be safely deployed. It offers three modes — Monitor, Enforce, and Disable — and is validated by Cisco Talos and red teaming partner Armadin. Currently shipping on Cisco N9000 data center switches, it is planned to expand to campus switches, wireless controllers, routers, and SD-WAN platforms.
