# ShareFile Users Urged to Shut Down Servers

Progress calls for immediate action due to security threat.

- **Source:** [Security Affairs](https://brifing.si/source/e6c4f5ec-3e1b-4152-a932-056243bd56eb)
- **Published:** 2026-07-12
- **Topic:** [Software & Engineering](https://brifing.si/c/engineering)
- **Original article:** <https://securityaffairs.com/195194/hacking/progress-told-sharefile-customers-to-pull-the-plug-on-their-servers-heres-what-we-know.html>
- **On Brifing:** https://brifing.si/s/775c2453-236a-4b76-b356-b413c6d6fc85

## Urgent Security Alert

Progress Software issued an urgent warning to ShareFile Storage Zone users to shut down their internet-facing servers immediately. This decision was made due to a serious security threat under investigation. The company advised customers to turn off their Windows servers promptly.

## Hybrid Storage Model

ShareFile's Storage Zone Controllers are part of a hybrid deployment model. In this model, files are stored on companies' own infrastructure while authentication and user management are handled via the cloud. This structure places servers at the edge of the network.

## Source of the Threat

Progress confirmed the existence of a credible external security threat. The company stated that it took this step in collaboration with internal and external security experts. While no unauthorized access has been detected yet, access was restricted as a precaution.

## Manual Server Shutdown

Progress advised customers to manually shut down the physical Windows servers hosting their Storage Zone Controllers. This step is seen as a critical measure to ensure data security. Cutting off cloud access alone was deemed insufficient.

## Past Similar Threats

ShareFile's Storage Zone Controllers have faced similar security threats in the past. In 2023, during Citrix's ownership, attacks exploited the CVE-2023-24489 vulnerability. This history underscores the seriousness of the current threat.

## Companies Must Stay Vigilant

Progress has yet to disclose details of the threat. Companies must remain cautious and enhance their security measures to protect sensitive files. ShareFile users should wait for official announcements before restarting their servers.

## Sources covering this story

- https://securityaffairs.com/195194/hacking/progress-told-sharefile-customers-to-pull-the-plug-on-their-servers-heres-what-we-know.html — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._