Overview
- Kiteworks advised a nine-hour precautionary shutdown for self-managed and Kiteworks-hosted systems after receiving what it called credible threat intelligence from federal authorities on Sept. 25.
- The company rescinded the shutdown recommendation and told customers they could restart systems following an incident-free weekend, announcing the advisory lift on Sept. 27.
- Kiteworks says the vulnerability appears confined to its Advanced Forms secure data collection product and that the feature is enabled for fewer than 1% of its roughly 3,800 customers.
- The firm reports no evidence the defect was exploited, is sharing intelligence with federal agencies and partners including Mandiant, and continues to recommend customers run release 9.5.1 while it monitors systems.
- Security experts called the vendor-led power-off unusual given Kiteworks’ history as Accellion and the high value of managed-file-transfer platforms, and customers reported short operational disruption that has prompted questions about disclosure detail and future emergency controls.