Kiteworks Urges Customers to Shut Down Systems After Threat Intelligence Warning
Summary
Kiteworks recommended a six-hour shutdown after receiving credible threat intelligence about possible targeting of customer systems. The company said it knows of no compromise and recommends using version 9.5.1.
Key points
- Kiteworks recommended that customers shut down its platform during a six-hour weekend window.
- The company said federal intelligence authorities provided credible warning of a possible attempt to target some customer systems.
- Kiteworks described the advisory as precautionary and said it was not aware of any compromised systems.
- Kiteworks said its current release, version 9.5.1, addresses known vulnerabilities and recommended customers use the latest version.
- A customer support official reportedly cited a potential zero-day, but Kiteworks provided no CVE or technical details.
- Kiteworks was previously known as Accellion; Clop used a zero-day against its file-transfer tool in 2020 to steal data from dozens of organizations.
Article Details
- Event Type
- Precautionary security advisory following threat intelligence about a possible attempt to target customer systems.
- Impact
- Kiteworks recommended that customers shut down its platform for a six-hour weekend window. The company said it was not aware of any compromise and that its current release, version 9.5.1, addresses known vulnerabilities. A customer support official reportedly cited a potential zero-day vulnerability, but no CVE or technical details were provided.
People
Frank BalonisCISO at Kiteworks who said the company received credible threat intelligence from federal authorities and recommended a precautionary shutdown.Jake KnottSenior official at watchTowr who said the firm was tracking the threat and described the shutdown recommendation as unusual and concerning.
Threat Actors
Vendors
Products
Accellionof any compromise and noting its latest release, 9.5.1, addresses known vulnerabilities, while past Accellion-related attacks by Clop highlight the risk to managed file transfer systems.KiteworksKiteworks warned customers to shut down its platform for a six-hour window over the weekend after receiving credible threat intelligence about a possible attempt to target some customer systems.