Progress urges ShareFile admins to shut down servers over “credible” threat

Progress Software is emailing ShareFile customers who use Storage Zone Controllers to immediately shut down their servers after identifying what it describes as a "credible external security threat" targeting the on-premises secure file-sharing software. ShareFile is Progress Software's enterprise secure file sharing and collaboration platform that allows customers to host their files in Progress' cloud infrastructure. However, organizations can opt to deploy Storage Zone Controllers to on-premise Windows servers to allow files to remain hosted locally within an organization's own storage while continuing to use ShareFile's cloud platform for authentication, user management, sharing, and collaboration. In these hybrid deployments, the ShareFile cloud authenticates users and determines which Storage Zone contains their files. When a user uploads or downloads a file, ShareFile directs the request to the organization's Storage Zone Controller, which retrieves or stores the file on the company's own storage before transferring it to the user. Because Storage Zone Controllers handle file transfers between the cloud platform and and customer-managed storage, they are typically Internet-accessible servers. The warning, sent to customers in an email last night and seen by BleepingComputer, is titled "Service Disruption. Immediate Action Required." "We have reason to believe there is a credible external security threat targeting Progress Software's ShareFile Storage Zone Controllers,...