Breaches and incidents
Kiteworks: customers told to shut down systems for nine hours after a federal threat warning
Kiteworks said on 25 Sep it received “credible threat intelligence from federal intelligence authorities” that “a threat actor may attempt to target some...
- Disclosed
- Verification
- Checked against a primary source
What happened
- Kiteworks said on 25 Sep it received “credible threat intelligence from federal intelligence authorities” that “a threat actor may attempt to target some Kiteworks systems” and recommended “a nine-hour precautionary shutdown window this weekend”; Kiteworks shut down hosted customer systems itself.
- Root cause: not disclosed. Kiteworks says “We have no indication that Kiteworks or our customers’ systems have been compromised” and that it “has accounted for all known vulnerabilities in our current release, 9.5.1.”
- No attacker named; THN notes Kiteworks did not say which agency warned it or who may be behind the threat.
- On 27 Sep Kiteworks lifted the recommendation for all customers and said hosted systems were back up; customers with self-hosted Advanced Forms should contact support. Subsidiaries (Zivver, DRACOON, totemo, ownCloud and others) were not affected.