🔴 Critical: Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown
-
Kiteworks has disclosed that it identified and addressed a critical security vulnerability during a scheduled precautionary shutdown, with the company confirming it worked alongside federal intelligence authorities over the weekend.
The flaw was previously unknown and is described as being confined to a capability that is enabled for less than 1% of the customer base. The discovery came about during the shutdown window, which Kiteworks had initiated as a precautionary measure.
Key points:
- The vulnerability is rated critical.
- It affects a capability enabled for less than 1% of customers.
- The issue was previously unknown prior to the shutdown.
- Kiteworks coordinated with federal intelligence authorities during the identification and remediation process.
- The company has since addressed the flaw.
No specific CVE identifier, advisory number, or affected version list was provided in the available reporting.
Organizations running Kiteworks should confirm with the vendor whether the affected capability is enabled in their environment, and apply any guidance issued as part of the fix.
Source: The Hacker News
Does your organization use Kiteworks, and if so, have you verified whether the impacted capability is enabled in your deployment?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login