Kiteworks urges precautionary shutdown after government threat warning

Kiteworks told customers to take systems offline for a nine-hour precautionary window after receiving credible threat intelligence from a government security agency. The company says no compromise has been detected and that version 9.5.1 fixes all known vulnerabilities.

Why it matters: - Kiteworks is warning customers to reduce exposure during a potential targeted attack window. - The advisory is precautionary, but it affects self-managed and vendor-hosted customer systems on a tight timeline. - The company says no signs of compromise have been found, which lowers the immediate alarm but does not remove the need for action.

What happened: - Kiteworks sent customers a precautionary recommendation after receiving credible threat intelligence from a government security agency. - The company advised a nine-hour shutdown window this weekend in each customer’s local time zone. - Customers running Kiteworks on premises or on AWS or Azure should shut those systems down during the window. - Kiteworks will shut down Kiteworks-hosted customer systems during the same window. - Allen customers received an email with the exact timing and the recommended nine-hour period.

The details: - Frank Balonis, Kiteworks chief information security officer, said the intelligence suggests a threat actor could try to attack specific Kiteworks systems. - Balonis said Kiteworks is working with the government security agency to clarify the situation. - Balonis said the recommendation is preventive and not a response to a confirmed breach. - Kiteworks says it has found no evidence that Kiteworks or customer systems were compromised. - Version 9.5.1 includes fixes for all known vulnerabilities. - Kiteworks continues to recommend that customers use the latest version. - The warning does not apply to other Kiteworks subsidiaries, including Zivver, DRACOON, totemo, ownCloud, WAMNET, Maytech, Bonfy.ai, and 123FormBuilder. - Customers with questions were directed to Kiteworks technical support at support@kiteworks.com, via the community portal, or through support information.

Between the lines: - The company is treating the threat as credible enough to justify a coordinated shutdown, even without evidence of an intrusion. - That points to a defensive posture aimed at limiting possible exploitation before more details are known. - The fact that the advisory is limited to Kiteworks and not its other subsidiaries suggests the issue is specific to one product line or environment.

What's next: - Customers are expected to follow the shutdown guidance during the assigned nine-hour window. - Kiteworks will continue working with the government agency while it investigates the threat information. - The company is likely to provide further direction if the threat assessment changes or if additional mitigation steps are needed.

The bottom line: - Kiteworks is urging customers to take a short, precautionary outage now to avoid a potentially more serious problem later.