Kiteworks urges customers to shut down their servers amid ‘imminent’ threat of cyberattack
Kiteworks told customers to shut down file-transfer servers after law enforcement warned of an imminent attack.
Kiteworks, formerly Accellion, told customers to shut down file-transfer systems after law enforcement shared credible intelligence that a threat actor may target some deployments, possibly this weekend. CISO Frank Balonis said the company knows of no compromise and called the notice preventative; the customer email cited concern about unknown zero-day flaws. Kiteworks says known bugs are fixed in release 9.5.1. Researcher Kevin Beaumont noted at least a thousand internet-facing systems. Before the late-2021 rebrand, an Accellion flaw let an extortion gang steal data from hundreds of organizations.
- Law enforcement warned Kiteworks of a possible imminent attack on customer systems.
- The company reports no confirmed compromise and calls the shutdown preventative.
- Customers were warned of possible unknown zero-days; latest release is 9.5.1.
- At least a thousand internet-facing Kiteworks servers were observed.
- A pre-2021 Accellion flaw previously enabled mass data theft and extortion.
- Products
- Kiteworks
- Countries
- United States
From the original article
3 min read at techcrunch.com
The tech giant, which allows companies to send large datasets over the internet, said it received a "credible threat" from law enforcement about an imminent attack.
By Zack Whittaker · techcrunch.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.