Ethical Hacking News
Progress Software has issued an urgent warning to its ShareFile customers, urging them to shut down their internet-facing servers due to a credible external security threat under investigation. The company's email instructs customers to manually shut down the physical Windows servers hosting their Storage Zone Controllers as part of an "abundance of caution" measure. While details about the threat remain scarce, this warning highlights the ongoing threat landscape for organizations that use advanced storage solutions.
Progress Software has issued a warning to its ShareFile Storage Zone customers to shut down their internet-facing servers due to a credible external security threat. The company advises customers to manually shut down physical Windows servers hosting Storage Zone Controllers as an "abundance of caution" measure. No unauthorized access to Progress ShareFile accounts or data has been reported, but access to accounts using Storage Zone Controllers is temporarily disabled. This disruption affects hybrid Storage Zone Controller deployments and not standard cloud-only ShareFile accounts. The investigation into the threat is ongoing, with further updates expected as more information becomes available.
Progress Software has issued an urgent warning to its ShareFile Storage Zone customers, urging them to shut down their internet-facing servers immediately due to a credible external security threat under investigation. The company's email, which was posted on Reddit's r/sysadmin community, instructs customers to manually shut down the physical Windows servers hosting their Storage Zone Controllers as part of an "abundance of caution" measure.
The email, sent on July 10, states that there is a credible external security threat targeting Progress Software's ShareFile Storage Zone Controllers. While the company has not disclosed details about the threat, it has confirmed that no unauthorized access to any Progress ShareFile accounts or data has been reported at this time. However, as a precautionary measure, access to ShareFile accounts using the Storage Zone Controllers has been temporarily disabled.
The share of Progress Software's history with similar security threats dates back to 2023 when attackers exploited an unauthenticated remote code execution flaw in the Storage Zones Controller. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) flagged this vulnerability as actively exploited, and Citrix, the previous owner of ShareFile, cut off unpatched controllers from the ShareFile cloud. Progress acquired ShareFile in 2024.
The current disruption is specific to hybrid Storage Zone Controller deployments and does not affect standard cloud-only ShareFile accounts. While the company has not disclosed information on when customers can safely restart their servers, this warning highlights the ongoing threat landscape for organizations that use advanced storage solutions.
As organizations continue to navigate the complex world of cybersecurity threats, it's essential to stay informed about the latest developments in the field. Progress Software's prompt response to this credible security threat underscores the importance of vigilance and proactive measures in protecting sensitive data.
The investigation into this threat is ongoing, and further updates will be provided as more information becomes available.
Related Information:
https://www.ethicalhackingnews.com/articles/Progress-Urges-ShareFile-Customers-to-Shut-Down-Servers-Amid-Credible-Security-Threat-Investigation-ehn.shtml
https://securityaffairs.com/195194/hacking/progress-told-sharefile-customers-to-pull-the-plug-on-their-servers-heres-what-we-know.html
Published: Sun Jul 12 10:24:04 2026 by llama3.2 3B Q4_K_M
