Kiteworks, previously known as Accellion, has recommended that customers temporarily shut down their systems for nine hours over the weekend. This precautionary measure comes after the company received credible intelligence regarding a potential cyber attack. Chief Information Security Officer Frank Balonis highlighted that the alert was issued following warnings from federal intelligence agencies about a possible threat to Kiteworks systems.
Precautionary Measures for Cyber Security
In an effort to safeguard their clients, Kiteworks has directly communicated with customers to outline the shutdown window, while collaborating with federal authorities to address the potential threat. The company has reassured customers that there is currently no evidence of any successful breaches, emphasizing that the shutdown is a preventive action rather than a response to an active compromise.
System Security Enhancements
While Kiteworks has not specified which federal agency issued the alert or identified the possible attackers, the company has reported that all known vulnerabilities have been resolved in its latest software update, version 9.5.1. Customers are urged to implement these updates to ensure their systems are fully protected.
Importantly, other subsidiaries of Kiteworks, including Zivver, DRACOON, and others, have not been impacted by this advisory. Kiteworks has sent detailed emails to customers, specifying the exact hours for the recommended shutdown.
Background on Previous Security Incidents
This proactive approach by Kiteworks comes in the wake of past incidents involving security breaches. In late 2020 and early 2021, the Clop threat group exploited several zero-day vulnerabilities in Kiteworks’ file transfer software, leading to data breaches and extortion attempts targeting prominent organizations.
Given the increasing sophistication of cyber threats, Kiteworks emphasizes the importance of continuous vigilance and timely updates to safeguard sensitive data. The company remains committed to working closely with federal authorities to minimize risks and ensure customer security.
