ShareFile Users Urged to Shut Down Servers
Progress calls for immediate action due to security threat.
1Urgent Security Alert
Progress Software issued an urgent warning to ShareFile Storage Zone users to shut down their internet-facing servers immediately. This decision was made due to a serious security threat under investigation. The company advised customers to turn off their Windows servers promptly.
2Hybrid Storage Model
ShareFile's Storage Zone Controllers are part of a hybrid deployment model. In this model, files are stored on companies' own infrastructure while authentication and user management are handled via the cloud. This structure places servers at the edge of the network.
3Source of the Threat
Progress confirmed the existence of a credible external security threat. The company stated that it took this step in collaboration with internal and external security experts. While no unauthorized access has been detected yet, access was restricted as a precaution.
4Manual Server Shutdown
Progress advised customers to manually shut down the physical Windows servers hosting their Storage Zone Controllers. This step is seen as a critical measure to ensure data security. Cutting off cloud access alone was deemed insufficient.
5Past Similar Threats
ShareFile's Storage Zone Controllers have faced similar security threats in the past. In 2023, during Citrix's ownership, attacks exploited the CVE-2023-24489 vulnerability. This history underscores the seriousness of the current threat.
6Companies Must Stay Vigilant
Progress has yet to disclose details of the threat. Companies must remain cautious and enhance their security measures to protect sensitive files. ShareFile users should wait for official announcements before restarting their servers.
Original article: Security Affairs — ShareFile Kullanıcılarına Sunucularını Kapatma Çağrısı