Kiteworks Advises Customers to Shut Down Systems Amid Potential Cyberattack Threat
Technology company Kiteworks is urging its customers to shut down their systems following credible threat intelligence suggesting a potential cyberattack may occur soon. The warning, sent via email and first reported by Heise, advises users to take precautionary measures before the weekend due to concerns over zero-day vulnerabilities that could be exploited. Kiteworks has not confirmed any breaches but is taking preventive action based on information from law enforcement partners. The company emphasized it had patched all known issues in its latest software release and recommended customers upgrade immediately. However, there are still unpatched flaws unknown to the vendor which pose a risk of exploitation. Kiteworks serves thousands of clients across various sectors including healthcare, technology, education, automotive, and government. Security researcher Kevin Beaumont noted that at least 1,000 internet-facing systems using Kiteworks products were publicly accessible. This is not the first time Kiteworks has faced cybersecurity challenges; prior to its rebranding in late 2021 from Accellion, a vulnerability led to widespread data breaches and ransomware attacks. Hackers had stolen sensitive information stored on servers and threatened public exposure unless ransoms were paid.
Topics: company alert cybersecurity zero-day vulnerabilities