Skip to content

Person

Frank Balonis

Field CISO at Kiteworks, a secure file-sharing and content-governance vendor serving enterprises and government agencies.

Current stories

securityConfirmed5 publishers

Kiteworks clears customers to restart file-transfer servers after a weekend shutdown on a federal tip

Kiteworks lifted its worldwide shutdown advice after patching a critical flaw in a feature used by under 1% of customers. Self-hosted operators stopped and restarted on the vendor's word alone, with no CVE yet to check the fix against.

Perspective Coverage

5 publishers
Builder
Builder 23%
Operator
Operator 60%
Investor
Investor 17%

Reality

Evidence55
Adoption
Not scored
Hype gap+15
Incentives70
Confidence60
securityOne report1 publisher

Kiteworks' shutdown all-clear sends self-hosted Advanced Forms customers to support

Kiteworks lifted its shutdown advice on Sunday and sent customers running self-hosted Advanced Forms, enabled at under 50 organisations, to support. The flaw has been described only in private customer emails, so those operators are handling it case by case with the vendor.

Publishers:securityweek.com

Reality

Evidence40
Adoption10
Hype gap
Not scored
Incentives60
Confidence45
investConfirmed3 publishers

Kiteworks asks customers to power down for nine hours to guard against zero-day attacks

Kiteworks told customers to shut its file-transfer servers for nine hours this weekend after a federal warning. The company says its current release fixes every known flaw, so the outage guards against one it does not know about.

Publishers:einpresswire.com heise.de techcrunch.com

Perspective Coverage

3 publishers
Builder
Builder 12%
Operator
Operator 63%
Investor
Investor 25%

Reality

Evidence60
Adoption50
Hype gap+25
Incentives65
Confidence55
securityConfirmed5 publishers

Kiteworks tells customers to shut down even internal file-sharing servers for six hours

Kiteworks told customers worldwide to power off its file-sharing servers for six hours on September 26 after a federal warning of a possible attack. Servers with no internet exposure are included, so being on release 9.5.1 with every known fix does not by itself clear a customer.

Perspective Coverage

5 publishers
Builder
Builder 18%
Operator
Operator 73%
Investor
Investor 9%

Reality

Evidence58
Adoption
Not scored
Hype gap+20
Incentives45
Confidence62
buildOne report1 publisher

Kiteworks asks customers to pull servers offline on unspecified law-enforcement intelligence

Kiteworks has told customers to shut down servers over a possible attack, and Heise reports a six-hour worldwide window starting Saturday. Its 9.5.1 update fixes only known flaws, so self-hosted operators are weighing downtime against a threat the company has not described.

Reality

Evidence50
Adoption
Not scored
Hype gap+10
Incentives55
Confidence55
securityOne report1 publisher

CMMC Phase 2 Assessments Are Paused. The False Claims Act Is Not.

Kiteworks found 96% of defense contractors trust their self-attested SPRS score and 29% can substantiate it. The DFARS duty to attest accurately never stopped when the third-party audits did.

Publishers:securityweek.com

Reality

Evidence54
Adoption63
Hype gap+22
Incentives80
Confidence55