Kiteworks Advises Precautionary Shutdown After Federal Threat Intelligence on Critical Flaw

Kiteworks issued a precautionary shutdown advisory to all customers in late September 2025 after receiving credible threat intelligence from US federal authorities suggesting a threat actor might target certain Kiteworks systems. The critical vulnerability was subsequently identified as limited to the Advanced Forms feature, affecting fewer than 50 organizations — under one percent of the customer base. No confirmed compromises or active exploitation have been reported in either Kiteworks or customer environments, and technical details of the flaw have not been publicly disclosed. The general shutdown advisory, which involved an approximately nine-hour service outage, was lifted on September 27. However, customers running Advanced Forms in self-hosted environments were instructed to contact Kiteworks support individually before resuming operations.