Kiteworks Advises Clients to Halt Use After Federal Threat Alert

Kiteworks, a provider of secure file‑sharing and content‑protection services, has issued an urgent advisory telling its customers to stop using the platform following a warning from U.S. intelligence agencies.

The company’s chief information security officer, Frank Balonis, told Recorded Future News that the firm had received "credible threat intelligence" indicating a hostile actor could attempt to compromise certain Kiteworks systems used by clients. While the advisory does not name a specific threat group, the language suggests that federal authorities consider the risk serious enough to merit immediate action.

Kiteworks’ suite of products is widely used by enterprises, government agencies, and regulated industries to exchange sensitive documents and collaborate securely. The platform employs encryption, access controls, and monitoring tools designed to keep data safe from interception and unauthorized access. A disruption or breach could expose confidential information, potentially violating compliance obligations and eroding trust.

The warning arrives amid a broader pattern of heightened scrutiny on secure‑collaboration tools. Over the past year, multiple federal agencies have issued alerts about state‑backed and financially motivated actors targeting cloud‑based file‑sharing services, exploiting misconfigurations or undisclosed vulnerabilities. Such advisories often prompt vendors to issue patches, but in this case Kiteworks has opted for a more drastic stop‑gap measure.

Customers have been instructed to cease all uploads, downloads, and sharing activities on the platform while the company works with the intelligence community to assess the threat. Kiteworks also recommends that organizations back up any critical data stored on the service, review alternative secure‑transfer solutions, and monitor for any anomalous activity related to their accounts.

Industry analysts note that the move underscores the growing challenge of balancing convenience with security in an environment where threat actors continuously adapt. While some competitors have faced similar alerts, few have taken the step of asking users to suspend service entirely, highlighting the seriousness of the intelligence received.

Kiteworks says it is collaborating closely with the relevant federal agencies to determine the scope of the potential attack and to develop remediation steps. The company has not provided a timeline for when normal operations might resume, but it has pledged regular updates to its client base as more information becomes available.