Progress tells ShareFile customers to shut down file servers over credible threat

Progress Software has told ShareFile customers to immediately shut down the on-premises Windows servers running Storage Zone Controllers, citing a "credible external security threat" against its enterprise file-sharing platform. The company has temporarily disabled access to affected accounts and says it has no sign of unauthorized access yet, but it has not disclosed what the threat is or whether a vulnerability is involved. Ordering a full shutdown rather than a patch strongly suggests there is no fix available. Only self-hosted Storage Zone Controllers, which typically sit internet-facing at the network edge, are affected, not cloud-only ShareFile. Progress also makes MOVEit, whose 2023 zero-day was mass-exploited by the Clop group.

Check

Determine whether you run ShareFile Storage Zone Controllers, and if so, follow Progress's guidance to shut down the hosting Windows servers now, while preserving system and administrative logs for investigation.

Affected

Organizations running on-premises ShareFile Storage Zone Controllers, which broker files between local storage and the ShareFile cloud and are usually internet-facing; cloud-only ShareFile accounts are not affected by this advisory.

Fix

Shut down Storage Zone Controller servers as Progress directs until a fix or all-clear is issued, review recent administrative activity and internet exposure, and watch for Progress updates.