Kiteworks urges customers to stop using platform after warning from federal intelligence agencies
Kiteworks told customers to shut systems down after federal intel warned of possible targeting.
Kiteworks CISO Frank Balonis said federal intelligence authorities warned that a threat actor may try to target some customer Kiteworks systems. The company urged a precautionary six-hour shutdown on Saturday and said it is not aware of any compromise. Known vulnerabilities are addressed in release 9.5.1, and no CVE or exploiting group was identified, though a support official told Heise the warning involved a potential zero-day. Kiteworks, formerly Accellion, was breached in 2020 when Clop used a zero-day against its file-transfer tool.
- Federal intelligence prompted a weekend precautionary shutdown recommendation.
- Kiteworks says no compromise is known and release 9.5.1 fixes known bugs.
- No CVE or named exploiting group has been published.
- Formerly Accellion, the firm was hit by a Clop zero-day in 2020.
- Vendors
- Kiteworks
- Products
- Kiteworks
- Threat actors
- Clop
- Countries
- United StatesRussia
From the original article
2 min read at therecord.mediaFrank Balonis, CISO at Kiteworks, told Recorded Future News that the company “received credible threat intelligence from federal intelligence authorities indicating that a threat actor may attempt to target some Kiteworks systems for customers.”
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.