Kiteworks urges customers to shut down servers for six hours over potential attack

Summary

Kiteworks advised customers worldwide to take servers offline for six hours after receiving law-enforcement threat intelligence about a potentially imminent attack. The company says the warning is precautionary and no compromise is known.

Key points

Kiteworks recommended a six-hour shutdown of customer servers worldwide during a specified Saturday window.
The recommendation followed credible threat intelligence from federal authorities about a possible attempt to target some customer systems.
Kiteworks said it is not aware of any compromise; the advisory is preventative, not a response to a confirmed breach.
The company says all known vulnerabilities are addressed in version 9.5.1 and recommends customers use the latest release.
Potential zero-day attacks were cited as a concern, but Kiteworks has not confirmed an unknown vulnerability or active exploitation.
No threat actor has been identified; Clop was mentioned only as a group with a history of targeting file-transfer platforms.

Article Details

Event Type: Precautionary customer server shutdown advisory following intelligence about a potentially imminent cyberattack
Impact: Kiteworks recommended that customers worldwide take their systems offline for six hours. The company reported no known compromise, and no zero-day vulnerability or exploitation was confirmed.

Threat Actors

ClopMentioned because of its history of targeting file-transfer platforms; the source says the actor behind the potential attack is unknown and does not link Clop to it.

Vendors

KiteworksKiteworks has warned customers worldwide to shut down their servers for a six-hour window after receiving credible threat intelligence from law enforcement about a potentially imminent attack.

Products