[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftm8stcDVV_92Ruxqlv76WPAjlJ40KTxy77SuAx-N01g":3},{"article":4,"iocs":45,"watch_terms":46,"solutions":47,"lesson":136},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"166c86ec-c318-4900-8ed9-4de457ee82e4","Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability","kiteworks-urges-server-shutdown-finds-advanced-forms-vulnerability-3a00f8","The company says the measure was precautionary and that it has no evidence of Kiteworks or customer systems being compromised. The post Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability appeared first on SecurityWeek.","Secure data sharing provider Kiteworks instructed customers to shut down servers due to credible threat intelligence about a zero-day vulnerability in its Advanced Forms product. The company has since lifted the recommendation, stating there is no evidence of compromise. The vulnerability affected less than 1% of customers, and Kiteworks is collaborating with partners like Mandiant to investigate the threat.","Kiteworks advises server shutdown due to zero-day vulnerability in Advanced Forms.","https:\u002F\u002Fwww.securityweek.com\u002Fkiteworks-urges-server-shutdown-finds-advanced-forms-vulnerability\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F12\u002Ffile-transfer-Moveit.jpg","2026-09-28T09:44:27+00:00","2026-09-28T10:00:08.138159+00:00",8,[17,20,23,25],{"name":18,"type":19},"Advanced Forms","product",{"name":21,"type":22},"Kiteworks","vendor",{"name":24,"type":22},"Accellion",{"name":26,"type":22},"Mandiant","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":27,"icon":29,"name":30,"slug":31},null,"Vulnerabilities","vulnerabilities",[33,38,40],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":39},{"id":27,"icon":29,"name":30,"slug":31},{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,24,26],{"controls":48,"vendors":135},[49,78,107],{"slug":50,"name":51,"problem":52,"products":53},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":79,"name":80,"problem":81,"products":82},"patch-management","Automated patch management","Known holes get closed in days, not months.",[83,91,99],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":44,"name":108,"problem":109,"products":110},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[111,119,127],{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",[],{"slug":137,"title":138,"body":139,"framework_refs":140,"framework_notes":152},"kiteworks-zero-day-forces-emergency-server-shutdowns","Kiteworks Zero-Day Forces Emergency Server Shutdowns","A zero-day vulnerability in Kiteworks' Advanced Forms product forced the company to issue emergency shutdown instructions to customers, highlighting the critical risk posed by unpatched vulnerabilities in secure data-sharing platforms. The situation underscores how even security-focused vendors can have exploitable flaws discovered by threat actors before a patch is available, leaving customers in a reactive posture. The rapid response — including collaboration with Mandiant and lifting the shutdown recommendation once the threat was assessed — demonstrates that having a mature incident response plan is essential. Organizations relying on third-party platforms for sensitive data sharing must have contingency plans for vendor-driven emergencies, as their security posture can be directly impacted by flaws outside their own control.",[141,142,143,144,145,146,147,148,149,150,151],"CIS Control 7 – Continuous Vulnerability Management","CIS Control 12 – Network Infrastructure Management","CIS Control 17 – Incident Response Management","NIST CSF ID.RA-1 – Asset Vulnerabilities Identified","NIST CSF RS.CO-2 – Incidents Reported per Established Criteria","NIST SP 800-61 – Computer Security Incident Handling Guide","NIST SR-6 – Supplier Assessments and Reviews (Supply Chain Risk)","ISO\u002FIEC 27001 A.12.6 – Management of Technical Vulnerabilities","ISO\u002FIEC 27001 A.16.1 – Management of Information Security Incidents","GDPR Article 32 – Security of Processing","GDPR Article 33 – Notification of Personal Data Breaches",{}]