PROGRESS Software has told ShareFile customers using Storage Zone Controllers to shut down their servers after detecting a credible external threat according to a report by databreaches.net. The warning affects on‑premises deployments that keep data local while still using cloud‑based features.
The vendor's advisory, highlighted by The Hacker News, did not cite a CVE number and warned that the flaw could permit unauthenticated remote code execution on the controller service. Progress said it has not confirmed active exploitation but considers the risk serious enough to require immediate action. All current releases of the Storage Zone Controller software running on Windows Server are affected.
Characterising the threat as credible, the company urged administrators to power down the affected services to prevent possible compromise. No threat actor has been named and there are no public reports of successful breaches linked to the alert. The notice follows a growing trend of vendors issuing pre‑emptive shutdown instructions for critical infrastructure components.
Administrators should isolate the underlying hosts from the network and review authentication logs and file access records for any anomalous activity that might indicate prior compromise. They should also preserve any relevant logs for forensic analysis before bringing the systems back online. Keeping a record of the shutdown time and the steps taken will aid incident response efforts.
When Progress publishes a patch or mitigation, administrators must apply it promptly and test the controller in a staging environment before returning it to production. Continuous monitoring of vendor advisories and subscription to security mailing lists will help detect similar threats early. Regularly reviewing the configuration of hybrid deployments can reduce the attack surface.
The incident highlights the risks inherent in hybrid cloud models where on‑premises components trust cloud‑managed services. Organizations that rely on similar split‑architecture products should review their incident response plans and ensure they can disconnect vulnerable services quickly.