In an unusual move, Progress Software has directed ShareFile customers running on-premises Storage Zone Controllers to immediately shut down their servers. The vendor cites a credible external security threat but has yet to disclose further details, prompting concerns about potential remote exploitation risks.
- Progress orders manual shutdown of ShareFile Storage Zone Controllers.
- No confirmed breach or active threat detected at this time.
- Investigation ongoing with limited public information.
What happened
Progress Software has informed its ShareFile customers that they must immediately power down their on-premises Storage Zone Controllers—Windows servers that enable local file storage integrated with the ShareFile cloud platform. This extraordinary direction came after Progress detected what it called a "credible external security threat" targeting these controllers. The vendor has temporarily disabled access to ShareFile accounts relying on Storage Zone Controllers while urging users to keep these servers offline.
The company has not released technical details regarding the threat vector, affected software versions, or any exploits in the wild. Customers were contacted via email and direct calls reinforcing the urgency of the shutdown. Progress is collaborating with internal teams and outside security experts to analyze the situation but has made no patch or mitigation guidance available yet, heightening uncertainty about the nature and scope of the risk.
Why it matters
Storage Zone Controllers are critical as they allow enterprises to retain control of sensitive files on-premises while leveraging ShareFile’s cloud services for management and authentication. Because these controllers usually sit on internet-exposed Windows servers, they can be vulnerable to remote code execution attacks if exploited. The enforced shutdown suggests the threat may enable unauthorized remote control, which would have severe security implications for enterprise data protection.
This incident follows recent patches Progress released to fix high-severity vulnerabilities in ShareFile controllers, including fixes for unauthenticated remote code execution. Although Progress has not confirmed any link, the emergency shutdown indicates a serious and emergent risk. The situation also revives questions over Progress’s ability to secure on-premises components following its recent struggles with MOVEit supply chain attacks in 2023 and 2024.
What to watch next
The key developments to monitor include Progress’s forthcoming updates regarding the precise nature of the threat, any identified exploits, and clear guidance on when administrators can safely power their Storage Zone Controllers back on. Customers will also look for technical advisories including patches or configuration recommendations to prevent potential exploitation.
Security researchers and enterprise customers will watch for any emerging reports of compromises related to this incident. Progress’s transparency and responsiveness in communicating updates will be critical for maintaining trust. Meanwhile, organizations dependent on Storage Zone Controllers should prepare contingency plans for ongoing disruptions and reassess exposure risks linked to their internet-facing infrastructure.