Progress Software Orders ShareFile Users to Shut Down Controllers

Progress Software has directed customers using its ShareFile service to immediately shut down the Windows servers hosting their Storage Zone Controllers. This directive stems from a "credible external security threat," as confirmed by Progress Software to The Hacker News. The company has proactively disabled access to affected accounts as a precautionary measure while it investigates the situation with internal and external security teams.

The specific nature of the security threat has not been disclosed, but the company's urgent instruction to shut down critical infrastructure indicates a potentially severe vulnerability. Storage Zone Controllers are essential for ShareFile's functionality, enabling users to store and access files outside of the primary ShareFile cloud environment, often within their own data centers or private clouds. Disabling these controllers would significantly disrupt file sharing and storage operations for affected businesses.

Progress Software has stated that it is working diligently to address the threat and restore normal operations as quickly and safely as possible. The company has not provided a timeline for when the Storage Zone Controllers can be safely reactivated. Customers are advised to monitor official Progress Software communications for further updates and guidance. The incident highlights the ongoing risks associated with third-party software components and the importance of rapid response protocols in managing security incidents.