Over the weekend, Kiteworks, a leader in secure data sharing solutions formerly known as Accellion, issued an urgent advisory to its customers. The company recommended a temporary shutdown of servers following credible threat intelligence from federal sources.
Precautionary Measures Initiated
On Friday, Kiteworks communicated with its clients to initiate a ‘precautionary shutdown’ lasting nine hours. This preventive measure aimed to protect systems from potential zero-day vulnerabilities. The vulnerabilities were reportedly present in some of its product offerings.
By Sunday, Kiteworks announced that the shutdown recommendation had been lifted, allowing all customer systems to resume normal operations. However, the company advised those with self-hosted Advanced Forms to seek support for further assistance.
Vulnerability Limited to Advanced Forms
In its communications, Kiteworks highlighted that the threat was linked to a critical vulnerability within its Advanced Forms product. This software is used for secure data collection and affects less than 1% of its customer base, amounting to under 50 organizations. Other products such as DPE, file collaboration, and email encryption systems remain unaffected.
The company assured that there has been no evidence of the vulnerability being exploited. Kiteworks is collaborating with industry partners like Mandiant to monitor and share threat intelligence.
Efforts to Enhance Security
Frank Balonis, the Chief Information Security Officer at Kiteworks, emphasized that the advisory was a precaution rather than a response to any confirmed security breach. The company has incorporated all known fixes into its latest version, 9.5.1, and continues to advise users to upgrade to this release.
Kiteworks’ proactive approach underscores its commitment to safeguarding customer data, and it remains engaged with federal authorities to stay ahead of potential threats.
In related news, other companies like Citrix and Microsoft have also been addressing vulnerabilities in their systems, further highlighting the importance of robust cybersecurity measures in today’s digital landscape.
