September 26, 2026
Kiteworks Orders a Global Shutdown on a Zero-Day Warning
Kiteworks (formerly Accellion) ordered a global six-hour server shutdown after law enforcement warned of an imminent zero-day attack, with parallels to the Cl0p/MOVEit incident raising concerns about the company's core infrastructure. ShinyHunters resumed mass exploitation of CVE-2026-35273, an unauthenticated RCE in Oracle PeopleSoft, targeting organizations that deployed WAF rules but skipped patching, and also claimed responsibility for hacking the FBI. Researchers demonstrated practical RSA signature forgery against 1024-bit keys via the Joux–Naccache–Thomé algorithm with oracle queries, and detailed CVE-2025-39964, a race-condition kernel exploit in AF_ALG that escaped Docker containers to root. Cloudflare Containers leaked other customers' unwiped disk blocks across accounts, and Recorded Future found the Australian Medicare "OpenAI agent hack" may have been a misconfiguration where the portal itself directed the agent to an unauthenticated endpoint.