Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack
Summary: Kiteworks, formerly Accellion, told customers to shut down their systems for a nine-hour weekend window after receiving threat intelligence from federal authorities that a threat actor may target some Kiteworks systems, according to CISO Frank Balonis. The company said it found no evidence of customer compromise, pointed to version 9.5.1 as addressing all known vulnerabilities, and lifted the shutdown recommendation as of September 27.
Key Takeaway: The vendor's own history is the stake: the Clop actor (UNC2546) exploited zero-days in its file transfer program in late 2020 and early 2021 to run a data theft and extortion campaign against high-profile entities, and this time the warning came from federal intelligence rather than a confirmed breach.
Read the original at The Hacker News ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026