Kiteworks warns customers to shut down systems for nine-hour precautionary window

Kiteworks told customers to take systems offline for a nine-hour precautionary shutdown after receiving credible threat intelligence from federal authorities. The company said current release 9.5.1 addresses all known vulnerabilities and that the advisory is preventative, not a response to a confirmed breach.

Why it matters: - Kiteworks is asking customers to temporarily shut down systems after receiving credible threat intelligence from federal intelligence authorities. - The advisory could interrupt access for some customers this weekend, but Kiteworks says the move is designed to reduce risk before any attack happens. - The company says its current release, 9.5.1, includes fixes for all known vulnerabilities.

What happened: - Kiteworks issued a precautionary advisory to customers after receiving intelligence that a threat actor may try to target some Kiteworks systems. - The company asked customers to observe a nine-hour shutdown window this weekend in their local time zone. - Customers who self-manage Kiteworks on-premises or on AWS or Azure are expected to shut down those systems themselves. - Kiteworks will shut down systems it hosts for customers during the same window, so Kiteworks-hosted customers do not need to take action. - Frank Balonis, Kiteworks chief information security officer, said the advisory is preventative and not tied to a confirmed breach.

The details: - Kiteworks said it has no indication that its own systems or customer systems have been compromised. - The company said it continues to work through the matter with federal intelligence authorities. - Kiteworks said all known vulnerabilities are accounted for in release 9.5.1. - Kiteworks continues to recommend that customers run the latest version of the platform. - The threat does not affect other Kiteworks subsidiaries, including Zivver, DRACOON, totemo, ownCloud, WAMNET, Maytech, Bonfy.ai and 123FormBuilder. - Kiteworks sent an email advisory to all customers with the specific hours and the recommended nine-hour timeframe. - Customers were directed to contact technical support by email at support@kiteworks.com, through the customer portal, or on the support page. - Support phone numbers were listed for North America, international, Australia, Germany, Israel, New Zealand, Singapore and the UK.

Between the lines: - The warning suggests Kiteworks is moving to reduce exposure before any attack can unfold, rather than waiting for evidence of compromise. - By separating hosted customers from self-managed ones, the company is signaling that mitigation steps depend on deployment model. - The mention of unaffected subsidiaries is aimed at containing concern across the wider company portfolio.

What's next: - Customers with self-managed deployments are expected to follow the shutdown guidance during the stated window. - Kiteworks will continue working with federal intelligence authorities as the situation develops. - The company says customers should remain on the latest release, 9.5.1, while the advisory remains in effect.