CORTEXCybersécurité
Kiteworks urges 6-hour server shutdown over potential zero-day attacks
Kiteworks fixed a critical flaw in a capability enabled for under 1% of customers, with no evidence it was ever exploited maliciously.
Kiteworks fixed a critical flaw in a capability enabled for under 1% of customers, with no evidence it was ever exploited maliciously.
Frank Balonis, CISO at Kiteworks, told Recorded Future News that the company “received credible threat intelligence from federal intelligence authorities indicating that a threat actor may attempt to target some Kiteworks systems for customers.”
PamStealer now uses live key exchange to block static payload recovery and is delivered through a fake Wavel macOS download.