Kiteworks Urges Global Customer Server Shutdown Over Imminent Zero-Day Threat

Kiteworks, formerly Accellion, warned customers of a credible and potentially imminent cyberattack targeting its systems and recommended a coordinated six-hour shutdown before the September 26 weekend. The company said the warning was based on law-enforcement intelligence and may involve exploitation of an unknown zero-day vulnerability; it advised shutting down affected systems even if they are not internet-facing because the potential access paths are unknown.

Kiteworks said it had no evidence that customer environments had been compromised when it issued the advisory. It stated that all known vulnerabilities are fixed in version 9.5.1 and urged customers to upgrade, while withholding the suspected attack vector, threat actor, law-enforcement source, and number of organizations potentially at risk.