Apple Officially Expresses Gratitude to the Hillstone Security Research Team for Detecting a Vulnerability in Apple iOS and iPadOS

On July 24, 2020, Apple released the security content of iOS 13.6 and iPadOS 13.6. The Hillstone Security Research team made a discovery of a vulnerability that is of great significance to the optimization of Apple’s ecosystem. YongYue “BigChan” Wang, a member of the Hillstone security research team, discovered the 0-click remote arbitrary file and…

Hillstone sBDS Expands Its Product Portfolio for Broader Spectrum

Hillstone Networks is pleased to announce version 3.0 of its Server Breach Detection System (sBDS). Included in this release are two new hardware models to address the needs of customers across a broader spectrum of use cases. The I1850 model is 1RU and supports up to 1 Gbps breach detection throughput, which is ideal for…

Network Detection and Response – The Building Blocks

In a previous article on this topic, I introduced NDR as a technology, and the key requirements for an NDR product or solution. In this article, I will explain the core technological building blocks of NDR. The Building Blocks of an NDR Solution A complete NDR solution should include end to end traffic monitoring, packet…

Vulnerability: Windows Kernel Privilege Escalation Vulnerability Found by Hillstone Networks

Today, Microsoft released the June product updates, which fixed two Windows kernel privilege escalation vulnerabilities (CVE-2020-1247, CVE-2020-1253) reported by Hillstone Networks. The latest security notification is published on the Microsoft website. The vulnerability affects all versions of the Windows operating system (Windows 7, Windows 8.1, Windows Server and all Windows 10 releases). Figure 1: Microsoft…

Vulnerability Notification and Hillstone Networks Solution: SMBv3 Protocol Remote Code Execution

[Overview] The SMB protocol is a network sharing protocol used in Microsoft Windows, and is often used to share files and printers within a local area network; SMBv3 is version 3 of SMB. Recently, Microsoft announced an SMBv3 remote code execution vulnerability. At present, Microsoft has released a security patch to fix the vulnerability. Meanwhile,…