Kiteworks, a secure data sharing solutions provider, advised customers to temporarily shut down their servers due to credible threat intelligence indicating potential targeting of zero-day vulnerabilities. The vulnerability is specifically in the Advanced Forms secure data collection product, which is enabled for fewer than 50 organizations (under 1% of customers). Kiteworks confirmed no evidence of exploitation or compromise and stated that all other products remain unaffected. The company recommends customers use the latest release, version 9.5.1, which addresses all known vulnerabilities. The shutdown was a precautionary measure while Kiteworks collaborated with federal intelligence and industry partners to assess the threat.

The vulnerability affects a small subset of customers using the Advanced Forms product. There is no evidence of exploitation or compromise of Kiteworks or customer systems. Other Kiteworks products are unaffected. The advisory was issued as a preventive measure based on credible threat intelligence, minimizing immediate risk to customers.

Kiteworks recommends customers run the latest version 9.5.1, which accounts for all known vulnerabilities. The precautionary shutdown advisory has been lifted, and systems can be brought back online. Customers using Advanced Forms should contact Kiteworks Customer Support for assistance. No further immediate action is required as the vulnerability has not been exploited and is confined to a limited product subset.