Progress ShareFile security threat

Progress Software alerted ShareFile customers using on-premises Storage Zone Controllers to immediately shut down their servers due to a credible external security threat. The company temporarily disabled affected accounts and launched an investigation with internal and external cybersecurity experts. No unauthorized access has been confirmed, but the precautionary measure was taken out of abundance of caution. The incident recalls past vulnerabilities in Progress's MOVEit product exploited by Clop ransomware in 2023. Shadowserver Foundation tracked hundreds of exposed instances globally. watchTowr CEO Benjamin Harrison noted the significant blast radius of potential exploitation. As of July 13, no update had been provided beyond the initial 24-hour window.