Kiteworks Urges Server Shutdown Due to Advanced Forms Vulnerability, Citing Federal Intelligence
Secure data sharing solutions provider Kiteworks, formerly Accellion, instructed its customers to temporarily shut down their servers over the weekend. This precautionary measure was taken in response to credible threat intelligence received from federal authorities, indicating a potential targeting of zero-day vulnerabilities within its products. The company initially recommended a nine-hour shutdown for on-premises and customer-hosted instances. On Sunday, Kiteworks announced that the shutdown recommendation had been lifted for most customers, allowing them to bring their systems back online. However, customers utilizing the self-hosted Advanced Forms product were advised to contact customer support for assistance. Kiteworks clarified that the severe vulnerability is specifically confined to its Advanced Forms secure data collection product, which is enabled for less than 1% of its customer base, affecting fewer than 50 organizations. Other products, including DPE, file collaboration, file transfer, emai...