Kiteworks says it contained a credible threat with a weekend shutdown

Kiteworks said it brought customer systems back online after a precautionary shutdown tied to credible threat information from government security agencies on Sept. 25. The company says the downtime uncovered and led to a fix for a critical vulnerability, with no evidence of compromise or exploitation.

Why it matters: - Kiteworks says the incident shows a proactive security response can prevent a possible attack before damage spreads to customer data. - The company says no Kiteworks or customer systems were compromised, and all hosted environments have been restored.

What happened: - Kiteworks said it recommended that customers take systems offline after receiving credible threat information from government security agencies. - Kiteworks shut down hosted environments it manages on behalf of customers and worked through the weekend with engineering and security teams. - The company said the threat window passed without incident. - Customers who have not yet restarted their Kiteworks systems can now do so.

The details: - Continuous monitoring showed no anomalies during the shutdown period. - Kiteworks said it has no evidence that Kiteworks or customer systems were compromised. - During the outage, the company and government security agencies identified a previously unknown critical vulnerability. - The vulnerability was limited to a feature enabled in less than 1% of customers’ environments. - Kiteworks developed and deployed a fix during the same window. - The company added an extra layer of protection across all environments. - Kiteworks said it has no indication the vulnerability was ever exploited. - The company said no other Kiteworks products were affected.

Between the lines: - The response suggests Kiteworks favored caution over waiting for confirmed intrusion activity. - The company framed the shutdown as a tradeoff between temporary disruption and a potential security breach. - Kiteworks also pointed to close coordination with government security agencies as central to the outcome.

What's next: - Kiteworks said customers with questions should contact technical support or their Customer Success representative. - The company said hosted systems are back online and functioning normally. - Customers who have not restarted their own systems can now bring them back up.

The bottom line: - Kiteworks used a precautionary shutdown to buy time, patch a critical flaw and restore service without evidence of compromise.