Kiteworks issues precautionary shutdown notice after credible threat warning

Kiteworks told customers to prepare for a nine-hour preventive shutdown window this weekend after receiving credible threat information from federal intelligence authorities. The company said there are no signs of compromise and that all known vulnerabilities are fixed in version 9.5.1.

Why it matters: - The notice could interrupt access for customers that run Kiteworks systems themselves or rely on Kiteworks-hosted environments. - The company said the alert is preventive, not a response to a confirmed breach. - All known vulnerabilities have been resolved in Kiteworks version 9.5.1, and the company still recommends customers use the latest release.

What happened: - Kiteworks issued a preventive notice to customers after receiving credible threat information from federal intelligence authorities. - The company recommended a nine-hour precautionary shutdown window this weekend, timed to each customer’s local time zone. - Customers who self-manage Kiteworks systems on-premises, in AWS or in Azure must shut those systems down during the window. - Kiteworks will shut down customer-hosted systems on behalf of hosted customers, so those customers do not need to take action. - Frank Balonis, Kiteworks’ chief information security officer, said the company notified customers directly while working with federal intelligence authorities. - Balonis said there are no indications that Kiteworks systems or customer systems were compromised. - Balonis said the company has resolved all known vulnerabilities in version 9.5.1 and continues to recommend the latest version.

The details: - Kiteworks said the threat information suggests a malicious actor could try to attack some Kiteworks systems. - The company sent email notices to all customers with specific timing details and the recommended nine-hour window. - The company provided support contact options through email, a community portal, a support website and phone numbers across North America, Australia, Germany, Israel, New Zealand, Singapore and the U.K. - The company’s support email is support@kiteworks.com. - The support portal is community.kiteworks.com. - The support site is kiteworks.com/support. - The notice does not affect other Kiteworks subsidiaries, including Zivver, DRACOON, totemo, ownCloud, WAMNET, Maytech, Bonfy.ai and 123FormBuilder.

Between the lines: - The shutdown window signals a defensive posture aimed at reducing exposure before any attack can unfold. - By separating hosted and self-managed customers, Kiteworks is trying to limit disruption while still pushing users into the same precautionary response. - The explicit statement that no compromise is known suggests the company is acting on threat intelligence rather than incident response evidence.

What's next: - Customers are expected to follow the shutdown guidance during their assigned local-time window. - Kiteworks said it will continue working on the matter with federal intelligence authorities. - Customers with questions are being directed to Kiteworks support for environment-specific guidance.

The bottom line: - Kiteworks is treating the threat as serious enough to warrant a temporary shutdown, but not serious enough to indicate a confirmed breach.