Kiteworks issues precautionary shutdown warning after threat intelligence alert

Kiteworks has told customers to prepare for a nine-hour precautionary shutdown window this weekend after receiving credible threat information from federal intelligence services. The company says there is no sign of a breach and that all known vulnerabilities are fixed in version 9.5.1.

Why it matters: - Kiteworks is asking customers to take systems offline as a preventive step, which could briefly disrupt access for organizations that rely on its file-sharing and data-governance tools. - The company says the warning is based on credible intelligence, but there is no evidence that Kiteworks or customer systems have been compromised. - The guidance applies to self-managed environments on premises, AWS, and Azure, while Kiteworks-hosted customers do not need to take action.

What happened: - Kiteworks issued a precautionary advisory to customers after receiving credible threat intelligence from federal intelligence services. - The company recommended a nine-hour shutdown window this weekend in each customer’s local time zone. - Kiteworks said it will shut down customer systems it hosts on behalf of customers during the same window. - The advisory was sent to customers by email with the specific timing and recommended nine-hour window.

The details: - Frank Balonis, Chief Information Security Officer at Kiteworks, said federal intelligence services informed the company that a malicious actor may try to target certain Kiteworks systems. - Balonis said Kiteworks is investigating the matter further with federal intelligence services. - Kiteworks said all known vulnerabilities have been fixed in version 9.5.1. - The company continues to advise customers to use the latest version. - The threat does not affect other Kiteworks subsidiaries, including Zivver, DRACOON, totemo, ownCloud, WAMNET, Maytech, Bonfy.ai, and 123FormBuilder. - Customers with questions were directed to Kiteworks Technical Support by email at support@kiteworks.com, through the community portal, or via support. - Kiteworks also listed regional support phone numbers for North America, international customers, Australia, Germany, Israel, New Zealand, Singapore, and the UK.

Between the lines: - The advisory appears designed to reduce exposure before any attack attempt rather than respond to a confirmed incident. - The timing suggests Kiteworks is prioritizing containment and verification across customer environments over normal system uptime. - By excluding hosted customers from the shutdown requirement, Kiteworks is limiting operational disruption where it can control the environment directly.

What's next: - Kiteworks will continue working with federal intelligence services on the issue. - Customers using self-managed deployments are expected to follow the shutdown guidance during the recommended window. - Further updates may follow if the investigation changes the company’s assessment of risk.

The bottom line: - Kiteworks is treating the threat as credible enough to warrant a temporary shutdown, but not as evidence of a breach.**}