💥 BREACHES & INCIDENTS
- Kiteworks urges customers to shut down servers over 'imminent' zero-day attack threat
Kiteworks has urged customers to shut down their file-transfer servers due to credible law-enforcement threat intelligence of an imminent zero-day attack.- Kiteworks (formerly Accellion) customers across healthcare, technology, education, automotive, and government are affected; thousands of customers, with at least a thousand internet-facing systems observed.
- The company received credible threat intelligence from law enforcement that a threat actor may target some customer Kiteworks systems using zero-day vulnerabilities unknown to the vendor.
- Kiteworks says no compromise has been confirmed and the advisory is preventative; it recommends all customers run the latest release, 9.5.1, which it says fixes all known vulnerabilities.
- The company did not name the law enforcement agency or hacking group; the FBI and CISA declined to comment.
- Kiteworks previously suffered a mass hack as Accellion in 2021, when a file-transfer vulnerability let an extortion gang steal data from hundreds of organizations.