Kiteworks restored customer systems after shutdown for credible threat

Kiteworks says all customer systems are back online after a precautionary shutdown on Sept. 25 tied to credible threat intelligence from federal authorities. The company says it found and fixed a previously unknown critical vulnerability during the response and has no evidence of exploitation.

Why it matters: - Kiteworks says the shutdown protected customer data during a period of credible threat intelligence from federal authorities. - The response uncovered a previously unknown critical vulnerability, showing the threat was serious enough to justify taking systems offline. - Kiteworks says all hosted customer systems have been restored and are operating normally.

What happened: - On Sept. 25, Kiteworks recommended that customers take their systems offline after receiving intelligence about a potential imminent attack. - Kiteworks also shut down environments it hosts on behalf of customers. - The company worked with its engineering and security teams and federal intelligence authorities during the response. - Kiteworks says the threat window passed without incident.

The details: - Continuous monitoring showed no abnormal activity during the shutdown period. - Kiteworks says it has no indication that any Kiteworks system or customer system was compromised. - The response led to discovery of a previously unknown critical vulnerability. - The vulnerability was confined to a capability enabled for less than 1% of the customer base. - Kiteworks developed and deployed a fix during the shutdown window. - The company also applied an additional protective layer across all environments. - Kiteworks says there is no indication the vulnerability was ever exploited. - All other Kiteworks products were unaffected. - Customers who have not already restarted can bring their Kiteworks system back online. - Customers with questions are being directed to Kiteworks Technical Support or their customer success representative. - Support contacts include the customer portal, technical support, and email at support@kiteworks.com.

Between the lines: - Kiteworks framed the shutdown as a tradeoff between certainty and convenience. - The company said it would rather act on credible warning than wait for proof of an attack. - The response relied on customer cooperation, with many teams working through the night alongside Kiteworks. - The episode suggests the company is positioning proactive shutdowns as part of its security standard, not an exception.

What's next: - Kiteworks says customers can return systems to normal operations if they have not already done so. - The company will keep its additional protective layer in place across environments. - Kiteworks is directing ongoing questions through support channels and customer success teams.

The bottom line: - Kiteworks says a precautionary shutdown, guided by federal intelligence, prevented potential harm and led to a fix for a critical vulnerability before any known exploitation.