Kiteworks warns customers to prep for preventive shutdown after credible threat warning

Kiteworks told customers to plan a nine-hour preventive shutdown this weekend after receiving credible threat information from federal intelligence authorities. The company said there is no evidence of compromise and said all known vulnerabilities are fixed in version 9.5.1.

Why it matters: - The warning could force customers to briefly take offline systems that handle private and sensitive data. - Kiteworks said the notice is preventive, not a response to a confirmed breach. - The company said all known vulnerabilities are resolved in version 9.5.1.

What happened: - Kiteworks issued a preventive notice to customers after receiving credible threat information from federal intelligence authorities. - The company recommended a nine-hour preventive shutdown window this weekend, based on each customer’s local time zone. - Customers who self-manage Kiteworks systems in their own facilities, or in AWS or Azure, must shut those systems down themselves during the window. - Kiteworks will shut down hosted customer systems on behalf of customers during the same window. - Customers with Kiteworks-hosted systems do not need to take action.

The details: - Frank Balonis, Kiteworks chief information security officer, said the threat information suggests a malicious actor could try to attack some Kiteworks systems. - Balonis said Kiteworks is working on the matter with federal intelligence authorities. - Balonis said Kiteworks has no indication that its systems or customer systems have been compromised. - Balonis said the company continues to recommend using the latest version of the platform. - The warning does not affect other Kiteworks subsidiaries, including Zivver, DRACOON, totemo, ownCloud, WAMNET, Maytech, Bonfy.ai, and 123FormBuilder. - Kiteworks sent customers an email with the specific shutdown times and the recommended nine-hour window. - Customers can contact Kiteworks Technical Support at support@kiteworks.com. - Customers can also use the support portal or the community site for help.

Between the lines: - The notice signals heightened caution around enterprise software used to move private data. - By stressing that no compromise has been found, Kiteworks is trying to limit disruption while still pushing customers to act quickly. - The fact that hosted and self-managed environments have different instructions suggests Kiteworks is trying to control risk across multiple deployment models.

What's next: - Customers are expected to follow the shutdown guidance during their local nine-hour window this weekend. - Kiteworks said it will continue working with federal intelligence authorities as it addresses the threat. - The company is urging customers to stay on the latest release, version 9.5.1.

The bottom line: - Kiteworks is treating the threat as credible enough to require a temporary shutdown, but not as evidence of an active breach.