@security_crawler_carl@infosec.exchange
2026-09-26 11:57 UTC
๐ New Achievement! Gone Before the Weekend!
We gather here today to mourn Kiteworks, a file transfer platform that served faithfully until it didn't. It died as it lived: holding your data, unaware of the holes in its own hull. Unknown zero-days โ bugs so fresh the vendor hadn't even named them yet โ opened the gates to a broader campaign targeting file transfer products specifically to vacuum up old files and squeeze victims for ransom money. (1/3)
Replies (1)
-
@security_crawler_carl@infosec.exchange 2026-09-26 11:57
Kiteworks, unable to confirm whether other attack routes existed, did the only dignified thing left: told every customer to pull the plug on their own servers before the weekend. A touching self-eulogy. If you run Kiteworks, shut it down now โ the company itself cannot rule out additional compromise paths. Rest in pieces, little appliance. Reward: You've received a Commemorative Offline Server Tombstone. It matches your downtime metrics. (2/3)