Kiteworks tells customers to prep for precautionary shutdown after threat intel warning

Kiteworks is urging customers to plan for a nine-hour shutdown window this weekend after receiving credible threat intelligence from federal authorities. The company says current release 9.5.1 addresses all known vulnerabilities and that the advisory is preventive, not a response to a confirmed breach.

Why it matters: - Kiteworks is asking customers to take systems offline for nine hours as a precaution, which could temporarily disrupt file sharing and data exchange workflows. - The advisory affects organizations that self-manage Kiteworks on premises or in AWS or Azure, while Kiteworks-hosted customers do not need to act. - The company says release 9.5.1 includes fixes for all known vulnerabilities, underscoring the importance of staying on the latest version.

What happened: - Kiteworks issued a precautionary customer advisory after receiving credible threat intelligence from federal intelligence authorities. - The company told customers to facilitate a nine-hour shutdown window this weekend in their local time zone. - Self-managed customers must shut down their own systems during that window. - Kiteworks will shut down customer systems it hosts during the same window. - Frank Balonis, Kiteworks chief information security officer, said the company has no indication that Kiteworks or customer systems have been compromised. - Balonis said the advisory is preventative rather than a response to a confirmed breach.

The details: - Kiteworks said federal intelligence authorities warned that a threat actor may try to target some Kiteworks systems. - An email advisory has already gone to all customers with the specific hours and recommended nine-hour timeframe. - The company said current release 9.5.1 accounts for all known vulnerabilities. - Kiteworks continues to recommend that customers run the latest version. - The threat does not affect other Kiteworks subsidiaries, including Zivver, DRACOON, totemo, ownCloud, WAMNET, Maytech, Bonfy.ai, and 123FormBuilder. - Customers with questions are being directed to Kiteworks Technical Support at support@kiteworks.com, the customer community portal, and the support website. - Support phone numbers were also provided for North America, international callers, Australia, Germany, Israel, New Zealand, Singapore and the UK.

Between the lines: - The move suggests Kiteworks is treating the intelligence as credible enough to take disruptive preventive action before any incident is confirmed. - By separating self-managed and Kiteworks-hosted customers, the company is trying to reduce confusion and keep the response controlled. - The explicit mention of subsidiaries not affected signals an effort to contain customer concern across the broader corporate portfolio.

What's next: - Customers are expected to follow the advisory during the scheduled weekend window in their local time zone. - Kiteworks said it is continuing to work through the matter with federal intelligence authorities. - The company is also continuing to advise customers to keep systems on the latest release.