Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack
Kiteworks urged a nine-hour customer shutdown after a federal warning of a possible attack.
Kiteworks told customers to shut down systems for nine hours after federal intelligence authorities said a threat actor might target some Kiteworks systems. CISO Frank Balonis said there is no evidence customer systems were compromised and called the shutdown preventative. The company said known vulnerabilities are fixed in release 9.5.1 and that subsidiaries including Zivver, DRACOON, and ownCloud are unaffected. Formerly Accellion, Kiteworks was targeted by Clop in 2020-2021 through zero-days in its file-transfer software.
- Federal intelligence warned of a possible imminent attack on some Kiteworks systems.
- Kiteworks found no customer compromise and called the nine-hour shutdown preventative.
- Known vulnerabilities are addressed in software release 9.5.1.
- Subsidiaries including ownCloud, Zivver, and DRACOON are not affected.
- Clop previously exploited Accellion zero-days in 2020-2021 for data theft.
- Vendors
- Kiteworks
- Products
- Kiteworks
- Countries
- United States
From the original article
1 min read at thehackernews.com
Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary measure for nine hours over the weekend after it received threat intelligence about an imminent cyber attack. "Kiteworks received credible threat intelligence from federal intelligence authorities indicating that a threat actor may attempt to target some Kiteworks systems," said Frank Balonis, Chief
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.