Kiteworks (Product): news timeline & CVEs

Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack

Kiteworks urged a nine-hour customer shutdown after a federal warning of a possible attack.

Kiteworks told customers to shut down systems for nine hours after federal intelligence authorities said a threat actor might target some Kiteworks systems. CISO Frank Balonis said there is no evidence customer systems were compromised and called the shutdown preventative. The company said known vulnerabilities are fixed in release 9.5.1 and that subsidiaries including Zivver, DRACOON, and ownCloud are unaffected. Formerly Accellion, Kiteworks was targeted by Clop in 2020-2021 through zero-days in its file-transfer software.

The Hacker NewsSep 26, 07:48 UTC · 1d agoAdvisory 5 sources

Kiteworks Warns Users to Take Systems Offline Amid Suspected Zero-Day Threat

Kiteworks told customers worldwide to take servers offline after law enforcement warned of a possible imminent zero-day attack.

Kiteworks told customers worldwide to take servers offline for six hours on Saturday, September 26, after credible law-enforcement intelligence that a threat actor might target deployments, possibly via an unknown zero-day. CISO Frank Balonis said the company is not aware of a compromise of its systems and has not named an actor, technique, component, or CVE. The advisory covers servers that are not internet-exposed, because other access paths could not be ruled out. Heise reported that known vulnerabilities are addressed in version 9.5.1.

GBHackersSep 26, 07:45 UTC · 1d agoExploit / PoC 5 sources

Kiteworks urges 6-hour server shutdown over potential zero-day attacks

Kiteworks urged a worldwide six-hour server shutdown after intelligence warned of possible imminent attacks.

Kiteworks warned customers that federal authorities shared credible intelligence that a threat actor may try to target some Kiteworks systems over the weekend of September 26. The company urged customers worldwide to shut down Kiteworks servers for six hours, including systems not exposed to the internet, with a Central Europe window of 4:00 a.m. to 10:00 a.m. Saturday. Kiteworks told BleepingComputer it knows of no compromise and that the advisory is preventative. Support comments referenced potential zero-day attacks, but neither the company nor the quoted notice confirmed a zero-day or exploitation; known vulnerabilities are said to be fixed in version 9.5.1.

BleepingComputerupdated Sep 26, 07:48 UTC · 1d agofirst Sep 25, 21:41 UTC · 1d agoAdvisory 5 sources1· 1 read

Kiteworks urges customers to stop using platform after warning from federal intelligence agencies

Kiteworks told customers to shut systems down after federal intel warned of possible targeting.

Kiteworks CISO Frank Balonis said federal intelligence authorities warned that a threat actor may try to target some customer Kiteworks systems. The company urged a precautionary six-hour shutdown on Saturday and said it is not aware of any compromise. Known vulnerabilities are addressed in release 9.5.1, and no CVE or exploiting group was identified, though a support official told Heise the warning involved a potential zero-day. Kiteworks, formerly Accellion, was breached in 2020 when Clop used a zero-day against its file-transfer tool.

The Recordupdated Sep 26, 07:48 UTC · 1d agofirst Sep 25, 20:19 UTC · 1d agoAdvisory 5 sources

Kiteworks urges customers to shut down their servers amid ‘imminent’ threat of cyberattack

Kiteworks told customers to shut down file-transfer servers after law enforcement warned of an imminent attack.

Kiteworks, formerly Accellion, told customers to shut down file-transfer systems after law enforcement shared credible intelligence that a threat actor may target some deployments, possibly this weekend. CISO Frank Balonis said the company knows of no compromise and called the notice preventative; the customer email cited concern about unknown zero-day flaws. Kiteworks says known bugs are fixed in release 9.5.1. Researcher Kevin Beaumont noted at least a thousand internet-facing systems. Before the late-2021 rebrand, an Accellion flaw let an extortion gang steal data from hundreds of organizations.

TechCrunch · Securityupdated Sep 26, 07:48 UTC · 1d agofirst Sep 25, 15:52 UTC · 1d agoAdvisory 5 sources

Kiteworks

Timeline5 articles

Appears with

Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack

Kiteworks Warns Users to Take Systems Offline Amid Suspected Zero-Day Threat

Kiteworks urges 6-hour server shutdown over potential zero-day attacks

Kiteworks urges customers to stop using platform after warning from federal intelligence agencies

Kiteworks urges customers to shut down their servers amid ‘imminent’ threat of cyberattack