September 26, 2026
- Kiteworks CISO Frank Balonis emailed customers that the company "received credible threat intelligence from law enforcement indicating an attack on Kiteworks systems may be imminent this weekend," recommending a six-hour shutdown from 04:00 CET on 26 September — explicitly regardless of version, network topology, or whether the system is internet-reachable (heise, TechCrunch). No CVE, no vulnerability detail, and no confirmed compromise have been published. The Accellion/Cl0p history and the MOVEit parallel are doing a lot of work here; German customers reportedly include state banks, insurers and automotive suppliers. Kevin Beaumont would "shut down Kiteworks servers full stop temporarily, not for 6 hours on Saturday, until the situation becomes clear", and notes Kiteworks says MFT isn't vulnerable but runs atop Kiteworks Core, which is (discussion). · Emergency Advisories & Active Exploitation