Kiteworks says federal intelligence authorities passed along credible intelligence that a threat actor may try to hit some Kiteworks systems, so the company asked customers to take them offline for a nine-hour precautionary window over the weekend, in local time. If you self-manage your deployment — on-prem, AWS, or Azure — that shutdown is yours to run; Kiteworks handled the boxes it hosts on customers' behalf. The company is careful to say it has no sign of any compromise, and that its current 9.5.1 release already accounts for every known vulnerability. A vendor telling you to physically pull the plug on a tip from federal intelligence is rare, and worth reading as a signal rather than boilerplate. Managed file-transfer products — Kiteworks descends from the old Accellion FTA lineage — have a grim history as mass-exploitation targets, so "preventative" is doing a lot of quiet work here. Get onto 9.5.1 if you aren't already, take the shutdown window, and watch for a follow-up advisory; the subsidiaries Kiteworks names (Zivver, DRACOON, totemo, ownCloud, and the rest) are said to be unaffected.