Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers

Sat, 11 Jul 2026 11:49:48 +0000

Engineer — Act: Progress has confirmed a credible active threat against on-prem ShareFile Storage Zone Controllers and is directing customers to shut them down immediately. If you run Storage Zone Controllers on Windows, take them offline now and await Progress’s remediation guidance before bringing them back up.
SOC/IR — Act: A vendor-confirmed active compromise campaign against enterprise file-sharing infrastructure warrants an assume-breach review if ShareFile is in your environment — check for lateral movement or data staging activity originating from Storage Zone Controller hosts since at least the past 30 days, and watch Progress and threat intel feeds for IOC release.
Leader — Act: Progress’s directive to shut down an enterprise product mid-operation signals a serious active incident; confirm this week whether your organization runs ShareFile Storage Zone Controllers, request a formal incident statement from Progress, and assess whether any stored data exposure triggers disclosure obligations.

Progress urges ShareFile Storage Zone Controller shutdown over active threat

Sat, 11 Jul 2026 11:49:48 +0000

Engineer — Act: If you run ShareFile Storage Zone Controllers on-premises, shut them down immediately per Progress’s emergency guidance — this is the same vendor that disclosed the MoveIt zero-day. Monitor Progress’s advisory channel for patch availability before bringing servers back online.
SOC/IR — Act: Progress issuing an emergency shutdown recommendation implies an unpatched, actively targeted vulnerability; treat any org running on-prem ShareFile Storage Zone Controllers as potentially exposed. Initiate a sweep for anomalous file-transfer or lateral-movement activity from those hosts since at least 72 hours prior to today.
Leader — Act: Progress Software — the MoveIt vendor — is issuing emergency shutdown orders for ShareFile on-premises deployments, a pattern consistent with imminent or in-progress exploitation. This week: confirm whether your org or any critical SaaS vendors run on-prem ShareFile Storage Zone Controllers and request attestations; brief leadership before this surfaces in news as a repeat of the MoveIt incident.