Kiteworks orders preventive shutdown after credible threat warning

Kiteworks told customers to prepare for a nine-hour preventive shutdown this weekend after receiving credible threat information from federal intelligence authorities. The company said its current 9.5.1 release has fixed all known vulnerabilities and there is no evidence of compromise.

Why it matters: - Kiteworks is asking customers to take systems offline temporarily to reduce risk while it works through a credible threat warning. - The notice affects customer access and operations for a nine-hour window this weekend in each customer’s local time zone. - The company says the action is preventive, not a response to a confirmed breach.

What happened: - Kiteworks issued a preventive notice to customers on Sept. 25, 2026, after receiving credible threat information from federal intelligence authorities. - The company advised customers to complete a nine-hour shutdown window this weekend in their local time zone. - Customers that self-manage Kiteworks systems on-premises, AWS or Azure must shut down those systems themselves during the window. - Kiteworks will shut down customer systems it hosts during the same window. - Customers with Kiteworks-hosted systems do not need to take action.

The details: - Kiteworks said all known vulnerabilities have been fixed in version 9.5.1. - The company said there is no evidence that Kiteworks systems or customer systems have been compromised. - Frank Balonis, Kiteworks chief information security officer, said the company notified customers directly and is continuing to work with federal intelligence authorities. - Kiteworks said the threat could involve an attacker attempting to target some Kiteworks systems. - The company recommended that customers use the latest version. - The threat does not affect other Kiteworks subsidiaries, including Zivver, DRACOON, totemo, ownCloud, WAMNET, Maytech, Bonfy.ai and 123FormBuilder. - Kiteworks sent an email notice to all customers with the specific timing and the recommended nine-hour period. - Customers were directed to contact Kiteworks technical support with questions about the notice or their environment. - Support channels include the customer support portal and the support site.

Between the lines: - The shutdown request suggests Kiteworks is treating the intelligence as serious enough to justify a broad precautionary step, even without confirmed compromise. - By separating hosted and self-managed environments, Kiteworks is limiting the burden on customers whose systems it controls directly. - The notice also signals that patching alone may not be viewed as sufficient protection against the potential threat.

What's next: - Customers will need to follow the shutdown guidance during the nine-hour window in their local time zone. - Kiteworks is expected to keep coordinating with federal intelligence authorities while the precautionary outage is in place. - Customers should continue using version 9.5.1 or later and monitor company support channels for additional instructions.