ShareFile Cloud Returns, But Customer Controllers Stay Offline
Progress has moved this from a cloud outage to a customer-owned containment problem. The vendor can cut off ShareFile access from its side, but the risky Storage Zone Controllers sit in customer environments, so the attack surface can stay live until those servers are actually shut down.
Progress said it disabled access to ShareFile accounts using Storage Zone Controllers and then started restoring cloud access on day 3, while telling customers to keep the controllers turned off. It said it has no evidence of unauthorized access to ShareFile accounts or data. The relevant exposure sits in the customer-managed Storage Zone Controller layer, not just in the SaaS account layer.
That means hybrid SaaS setups with customer-managed connectors or gateways can leave the hard containment step with the customer even after the vendor service comes back. In this case, patching or restoring the cloud side does not by itself retire the exposed edge device.