According to Heise, then TechCrunch, Kiteworks has issued a warning to customers of an “imminent” attack, with the CISO recommending a six-hour shutdown “this weekend.”
“Out of an abundance of caution, we notified customers directly and recommended a precautionary shutdown window while we and our law enforcement partners work through the matter,” said Balonis. “We are not aware of any compromise of Kiteworks systems, and this advisory is preventative rather than a response to a confirmed breach.”
Thousands of Kiteworks servers may be online, but it’s worth noting that Shodan scans for such servers may be unreliable.
Okay, but it is a Friday. Do you really expect Kiteworks to work overtime on a weekend to release a patch when they can just instead ask their customers to shut down?
I expect nothing at all. It’s a 0-day so they may not know what to patch. Six hours is kind of a weird recommendation, but let’s remember that Accellion Kiteworks got slammed so hard before they had to change their name.
