Kiteworks Warns Users to Take Systems Offline Amid Suspected Zero-Day Threat
Kiteworks told customers worldwide to take servers offline after law enforcement warned of a possible imminent zero-day attack.
Kiteworks told customers worldwide to take servers offline for six hours on Saturday, September 26, after credible law-enforcement intelligence that a threat actor might target deployments, possibly via an unknown zero-day. CISO Frank Balonis said the company is not aware of a compromise of its systems and has not named an actor, technique, component, or CVE. The advisory covers servers that are not internet-exposed, because other access paths could not be ruled out. Heise reported that known vulnerabilities are addressed in version 9.5.1.
- Kiteworks asked customers to power down servers from 02:00 to 08:00 UTC on September 26.
- Law enforcement provided credible intelligence of a possible imminent attack, potentially an unknown zero-day.
- Kiteworks says it is not aware of a compromise and has named no actor, technique, or CVE.
- Shutdown guidance covers internal systems, not only internet-exposed deployments.
- Known issues are said to be fixed in release 9.5.1, which customers should run.
From the original article
2 min read at gbhackers.com
Kiteworks has urged customers worldwide to temporarily shut down their servers after receiving credible law-enforcement intelligence that a threat actor may target Kiteworks deployments over the weekend. The emergency advisory is preventive, but the company said the potential activity may involve an unknown zero-day vulnerability.
By Eswar · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.