Vulnerabilities
Kiteworks Identifies & Remediates Critical Vulnerability During Nine‑Hour Shutdown
During a precautionary nine‑hour shutdown, Kiteworks uncovered a critical flaw in a feature used by less than 1% of customers. A patch and additional protective layer were deployed, with no evidence of exploitation. Defenders should confirm their systems are patched and review the affected capability.
What Happened
Kiteworks performed a scheduled nine‑hour shutdown to mitigate a potential cyber‑attack. During this window the team discovered a previously unknown critical vulnerability confined to a capability that is enabled for under 1% of the customer base.
Impact
The flaw is limited to a single feature and has not been exploited in the wild. No other Kiteworks products are affected, and there is currently no CVE identifier assigned.
Mitigation Steps
Within the shutdown window Kiteworks developed and deployed a fix, and added an extra protective layer across all environments. The patch addresses the root cause and hardens the vulnerable capability.
Recommendations for Defenders
• Verify that your Kiteworks instance is running the latest version and that the patch has been applied.
• Identify whether the affected capability is enabled in your environment; if so, consider disabling it until a full audit is performed.
• Monitor logs for anomalous activity related to the feature and keep an eye on any future public advisory or CVE assignment.
Related vulnerabilities
Kiteworks Advises 9‑Hour System Shutdown Amid Credible Threat Intelligence
Kiteworks (formerly Accellion) has instructed customers to shut down their systems for a nine‑hour window over the weekend after receiving credible threat intelligence that a threat actor may target its platform. The advisory is preventative; no compromise evidence has been found. Defenders should apply the latest 9.5.1 patch, observe the shutdown window, and monitor for anomalous activity.
Read briefing
Adobe Releases Patches for Nine Critical Connect Flaws and Six AEM Forms Vulnerabilities
Adobe has issued updates that fix nine critical defects in Adobe Connect and six critical flaws in AEM Forms, all capable of enabling arbitrary code execution or privilege escalation. The patches address SQL injection, XSS, SSRF, and path traversal issues. Defenders should apply the updates immediately and verify affected versions.
Read briefing
Apple iOS/macOS Vulnerability Enables Remote Code Execution via Malicious Update
Apple discovered a critical flaw in its iOS, iPadOS, and macOS update mechanism that could allow attackers to execute arbitrary code on a device during a legitimate update. The vulnerability is exploitable by a malicious update package and is rated CVE-2026-XXXX with CVSS 9.8. Defenders should apply the latest security patch immediately and verify update integrity.
Read briefing
Schneider Electric PowerChute Serial Shutdown Vulnerability (CVE‑2026‑13348) – Immediate Patch Required
Schneider Electric’s PowerChute Serial Shutdown UPS management software is affected by a CVE‑2026‑13348 flaw that allows unlimited authentication attempts when redirect handling is disabled. The issue could enable attackers to bypass login controls and disrupt critical infrastructure operations. Versions up to 1.5 and 1.6 are impacted; the vendor’s v1.6 patch restores proper authentication limits. Operators must download and install the update for Windows and Linux immediately, then verify the new version via the Control Panel or PCSS About page.
Read briefing