Kiteworks told customers to stop using and shut down some systems during a six-hour window after federal intelligence authorities warned that attackers may target Kiteworks deployments. The company says it has no confirmed compromise yet and describes the notice as preventive, but customer support reportedly linked it to a potential zero-day vulnerability. Kiteworks says customers should be on the current 9.5.1 release; no CVE, affected attack path, or threat actor has been publicly identified.
info@thehackernews.com (The Hacker News)
2026.09.29
96% relevant
This source appears to update the same incident by adding that Kiteworks identified and fixed a critical flaw during the shutdown window, turning the earlier emergency warning into a concrete vulnerability-and-patch event.
Sergiu Gatlan
2026.09.29
99% relevant
This is a direct follow-up on the same Kiteworks incident, adding that the shutdown advisory has been lifted, hosted systems were brought back online, a fix was deployed for a critical vulnerability in Advanced Forms used by less than 1% of customers, and Kiteworks says it found no evidence of exploitation or compromise.
info@thehackernews.com (The Hacker News)
2026.09.26
99% relevant
This appears to cover the same Kiteworks emergency shutdown event, adding the reported nine-hour shutdown window and framing it as a response to a possible cyberattack affecting Kiteworks systems.
Lawrence Abrams
2026.09.25
99% relevant
This article is a direct update on the same Kiteworks emergency advisory, adding BleepingComputer's confirmation from the company that the warning came from federal intelligence authorities, that no compromise is yet known, that version 9.5.1 is the current recommended release, and that the six-hour shutdown request is precautionary amid possible zero-day targeting.
2026.09.25
100% relevant
This article establishes a new story because it is the first reported warning that Kiteworks customers were told to shut down systems due to credible federal intelligence about possible targeting and a suspected zero-day.