Kiteworks CISO: Why We Shut Down Systems Before Finding Vulnerability | TechTarget
A warning from federal authorities about a potentially imminent cyberattack prompted the secure file-sharing vendor Kiteworks to recommend that customers shut down production systems for nine hours in late September.
The company also took the systems it hosts offline, acting on threat intelligence before a breach had been confirmed.
During that window, Kiteworks discovered and patched a critical vulnerability involving Advanced Forms, its secure data collection and web form feature. The company subsequently reported no evidence of compromise and restored its hosted services.
In the aftermath of the incident, Kiteworks CISO Frank Balonis told TechTarget that authorities monitoring known threat actors provided a warning whose source and timing warranted immediate action -- even though the company did not yet know how an attack might unfold.
"At that point, we did not know precisely how the threat actors planned to exploit Kiteworks," Balonis said. "Given the sensitivity of the data our...
Copyright of this story solely belongs to www.techtarget.com. To see the full text click HERE
