Progress Software is warning ShareFile customers using Storage Zone Controllers—on-premises Windows servers that handle file transfers between the ShareFile cloud and local storage—of a credible external security threat. The company has temporarily disabled access to these controllers via the cloud and is instructing customers to manually shut down the servers to protect data. The threat details, including whether it involves a zero-day vulnerability or active compromise, have not been disclosed. Progress is collaborating with cybersecurity experts to investigate and plans to update customers within 24 hours. This advisory follows a pattern of targeted attacks on enterprise file-sharing platforms, such as the 2023 MOVEit Transfer zero-day exploitation by the Clop extortion group.

The threat targets on-premises Storage Zone Controllers used in hybrid ShareFile deployments, potentially exposing locally stored files if exploited. While no unauthorized access or data compromise has been confirmed, the threat is considered credible enough to warrant immediate server shutdowns and temporary disabling of cloud access to these controllers. This disruption impacts the availability of ShareFile services relying on Storage Zone Controllers, causing operational downtime until the threat is mitigated.

Progress has temporarily disabled access to ShareFile accounts using Storage Zone Controllers and is instructing customers to manually shut down the Windows servers hosting these controllers. Customers should follow this directive immediately as disabling cloud access alone is insufficient. Progress is investigating the threat and will provide further updates within 24 hours. No official patch or fix has been announced yet. Customers should monitor official Progress communications for remediation guidance and avoid reactivating Storage Zone Controllers until cleared by the vendor.