Kiteworks issues preventive shutdown notice after threat warning

Kiteworks warned customers to prepare for a nine-hour preventive shutdown this weekend after receiving credible threat information from U.S. federal intelligence authorities. The company said there is no sign of compromise and that all known vulnerabilities are fixed in version 9.5.1.

Why it matters: - Kiteworks is asking customers to take systems offline for up to nine hours as a precaution against a possible attack. - The notice affects customers running Kiteworks in their own environments as well as those using AWS or Azure deployments. - Kiteworks-hosted customers do not need to take action because the company will handle the shutdown for them.

What happened: - Kiteworks issued a preventive alert after receiving credible threat information from U.S. federal intelligence authorities. - The company said the warning is tied to a possible attempt by a malicious actor to target some Kiteworks systems. - Frank Balonis, Kiteworks chief information security officer, said the company notified customers directly and is working with federal intelligence authorities. - The notice was sent on Sept. 25, 2026, from San Mateo, California.

The details: - Customers should plan for a nine-hour preventive shutdown window this weekend based on their local time zone. - Self-managed customers in on-premises environments, AWS or Azure must shut down their own systems during that window. - Kiteworks will shut down hosted customer systems during the same window. - Kiteworks said there are no indications that Kiteworks systems or customer systems have been compromised. - Kiteworks said all known vulnerabilities are resolved in version 9.5.1. - The company continues to recommend using the latest version. - The warning does not affect other Kiteworks affiliates, including Zivver, DRACOON, totemo, ownCloud, WAMNET, Maytech, Bonfy.ai and 123FormBuilder. - Kiteworks emailed customers with the specific timing details and the recommended nine-hour window. - Customer support contacts include the support portal and technical support site, along with regional phone numbers in North America, Australia, Germany, Israel, New Zealand, Singapore and the United Kingdom.

Between the lines: - The company is treating the situation as a precautionary security response rather than a confirmed incident. - The absence of evidence of compromise suggests the shutdown is intended to reduce risk before any potential exploitation. - Naming unaffected affiliates signals the alert is limited to the Kiteworks product line and not the broader group.

What's next: - Customers are expected to follow the shutdown guidance during the assigned local-time window. - Kiteworks said it will continue working with federal intelligence authorities while addressing the threat. - Customers with questions are being directed to Kiteworks technical support for environment-specific guidance.

The bottom line: - Kiteworks is urging caution now to avoid a possible future breach, even though it says there is no current evidence of compromise.