Progress Software has ordered an immediate shutdown of certain on-premises components after identifying a credible external security threat affecting ShareFile Storage Zone Controllers. Customers are being urged to follow strict shutdown procedures while an investigation is under way.
H2: What customers must do now
Progress is instructing organizations that use Storage Zone Controllers—the on-premises servers that host files while ShareFile manages access via the cloud—to power down those servers immediately. The company warns that simply blocking access through the ShareFile cloud is not enough; the controllers must be taken offline manually to mitigate the risk.
H2: Current risk assessment
At this stage, there is no confirmed evidence of unauthorized access to accounts or data, according to the vendor. Nevertheless, temporary restrictions have been imposed as a precautionary measure while teams assess the threat. Progress stresses urgency because the threat is considered credible and external.
H2: Investigation and timeline
Progress Software says it is working with cybersecurity experts to investigate the incident and will provide an update within 24 hours. The firm has not disclosed whether a previously unknown (zero-day) vulnerability is involved, nor whether any Storage Zone Controllers have been compromised.
H2: Why this matters — context and precedent
The alert recalls prior high-impact attacks on enterprise file-sharing products, including a zero-day exploitation in Progress’s MOVEit Transfer in 2023. On-premises deployments can expand an attacker’s attack surface, making rapid, manual mitigation steps essential for organizations that host data behind their own Storage Zone Controllers.
H2: Practical implications for operations
Taking Storage Zone Controllers offline can disrupt file access and business workflows that rely on on-premises hosting. IT teams should coordinate shutdowns to minimize operational impact while preserving system images and logs for forensic analysis. Communications to staff and partners should be prepared to explain potential service interruptions.
H2: What organizations should prepare for next
Organizations should prioritize securing backups, collecting relevant logs, and following vendor guidance for system verification before bringing controllers back online. Consider engaging third-party incident response services if internal resources are limited. Monitor updates from Progress and apply any recommended patches or configuration changes promptly.
Actions to consider now:
– Power down Storage Zone Controllers as instructed.
– Preserve system images and logs for investigation.
– Communicate expected downtime to stakeholders.
– Stand by for vendor guidance and patch releases.
A rapid, coordinated response can limit exposure while investigators work to determine the attack vector and any required remediation. Expect further technical details from Progress as the investigation progresses.
