Kiteworks tells customers to plan precautionary shutdown after threat intelligence warning

Kiteworks issued a preventative advisory after receiving credible threat intelligence from federal authorities, telling customers to prepare for a nine-hour shutdown window this weekend. The company says current release 9.5.1 addresses all known vulnerabilities and that there is no sign of a breach.

Why it matters: - Kiteworks customers may need to briefly take systems offline to reduce risk while the company and federal intelligence authorities investigate a credible threat warning. - The advisory is precautionary, not a response to a confirmed compromise, which lowers the immediate alarm but still signals a real security concern. - Kiteworks says current release 9.5.1 addresses all known vulnerabilities, making version management part of the response.

What happened: - Kiteworks issued a precautionary advisory to customers after receiving credible threat intelligence from federal intelligence authorities. - The company is asking customers to plan for a nine-hour precautionary shutdown window this weekend, in their local time zone. - Customers that self-manage Kiteworks systems on-premises, on AWS or on Azure should shut those systems down themselves during the window. - Kiteworks will shut down customer systems it hosts during the same window. - Kiteworks-hosted customers do not need to take action.

The details: - Frank Balonis, Kiteworks chief information security officer, said the company notified customers directly and recommended the shutdown window while it continues working with federal intelligence authorities. - Balonis said Kiteworks has no indication that the company or customer systems have been compromised. - Balonis said the advisory is preventative rather than a response to a confirmed breach. - Balonis said Kiteworks has accounted for all known vulnerabilities in release 9.5.1. - Kiteworks continues to recommend that customers run the latest version. - An email advisory was sent to all customers with the specific hours and the recommended nine-hour timeframe. - Customers can contact Kiteworks Technical Support by email at support@kiteworks.com, through the support portal, or via the support website. - Support numbers were provided for North America, International, Australia, Germany, Israel, New Zealand, Singapore and the UK.

Between the lines: - A precautionary shutdown suggests Kiteworks is treating the intelligence as credible enough to justify temporary operational disruption, even without evidence of an active breach. - The company’s distinction between hosted and self-managed customers shifts the operational burden to organizations that control their own environments. - Kiteworks explicitly says the threat does not affect other subsidiaries, including Zivver, DRACOON, totemo, ownCloud, WAMNET, Maytech, Bonfy.ai and 123FormBuilder.

What's next: - Customers will need to follow the local nine-hour shutdown window and restore systems afterward. - Kiteworks said it is continuing to work through the matter with federal intelligence authorities. - The company is directing customers to use support channels if they have questions about the advisory or their specific environment.

The bottom line: - Kiteworks is urging a temporary shutdown as a defensive measure, saying its current release covers known vulnerabilities and there is no sign of compromise.