Kiteworks Patches Critical Flaw Found During Emergency Shutdown

Tue, 29 Sep 2026 16:53:02 +0000

Engineer — Plan: If Kiteworks is in your stack, verify whether the affected capability (enabled for <1% of customers) is active in your deployment and apply the available patch this sprint; no exploitation signals yet but federal involvement warrants prompt action.
SOC/IR — Skip
Leader — Plan: If Kiteworks is in your vendor portfolio, contact them to confirm whether your tenant used the affected capability and request written attestation that the fix has been applied to your environment.

Vendor-Patch on CuraSec