Kiteworks warns customers to plan precautionary shutdown after threat intelligence alert

Kiteworks told customers to prepare for a nine-hour shutdown window this weekend after receiving credible threat intelligence from federal authorities. The company said current release 9.5.1 covers all known vulnerabilities and that the advisory is preventive, not a response to a confirmed breach.

Why it matters: - The advisory could briefly interrupt access for customers who self-manage Kiteworks systems on-premises or in AWS or Azure. - Kiteworks-hosted customers do not need to take action because Kiteworks will shut down those systems on their behalf. - The warning is aimed at reducing risk before any attack attempt against some Kiteworks systems.

What happened: - Kiteworks issued a precautionary advisory after receiving credible threat intelligence from federal intelligence authorities. - The company told customers to facilitate a nine-hour shutdown window this weekend in their local time zone. - Frank Balonis, Kiteworks chief information security officer, said the company has no indication that Kiteworks or customer systems have been compromised. - Balonis said the advisory is preventative rather than a response to a confirmed breach.

The details: - Customers who self-manage Kiteworks systems are being asked to shut those systems down during the window. - Kiteworks will shut down customer systems it hosts during the same window. - Kiteworks said its current release, 9.5.1, addresses all known vulnerabilities. - The company continues to recommend that customers run the latest version. - The threat does not affect other Kiteworks subsidiaries, including Zivver, DRACOON, totemo, ownCloud, WAMNET, Maytech, Bonfy.ai, and 123FormBuilder. - Kiteworks sent an email advisory to all customers with the specific hours and the recommended nine-hour timeframe. - Customers were directed to contact Kiteworks Technical Support by email at support@kiteworks.com, through the customer portal, or at support resources. - Support phone numbers were provided for North America, International, Australia, Germany, Israel, New Zealand, Singapore and the UK.

Between the lines: - The company is treating the intelligence as credible enough to prompt action, but not as evidence of a successful intrusion. - The focus on a short shutdown window suggests a defensive step designed to narrow exposure while federal authorities and Kiteworks continue to assess the threat. - By separating Kiteworks from its subsidiaries, the company is signaling that the warning is limited in scope.

What's next: - Customers should follow the emailed instructions and complete the shutdown during the assigned local-time window. - Kiteworks said it will continue working through the matter with federal intelligence authorities. - Customers with questions about their environment are expected to contact Kiteworks Technical Support for guidance.