Kiteworks orders global 6-hour server shutdown over zero-day threat

Kiteworks, a provider of secure file-sharing and collaboration software, has directed customers worldwide to temporarily power down their on-premises servers for a six-hour period. The company issued the instruction after receiving threat intelligence indicating a potential zero-day vulnerability that could be exploited in imminent cyberattacks.

What happened

On Friday, Kiteworks sent an urgent advisory to its customer base, warning of an unspecified security risk and recommending a server shutdown as a precautionary measure. The company did not disclose details about the nature of the vulnerability, the source of the threat intelligence, or whether any attacks had already been observed. The shutdown window was set for Saturday, with no specific start time provided in public communications.

Kiteworks has not released a patch or workaround for the issue, leaving the shutdown as the only immediate mitigation. The company stated that cloud-hosted instances of its software would not be affected, as it would apply necessary protections directly.

What we don't know yet

The advisory did not specify whether the threat intelligence originated from internal monitoring, a third-party security researcher, or a government agency. No information was provided about the potential impact of successful exploitation, such as data exfiltration, ransomware deployment, or lateral movement within networks. Kiteworks has not indicated when a patch or further details will be available.