FSB orders Russian critical infrastructure websites taken offline over PHP vulnerabilities
Russia’s Federal Security Service’s cybersecurity center has ordered organizations that run the country’s critical information infrastructure to temporarily shut down their websites if they cannot quickly update their software to protect against the PHP vulnerabilities.
The Federal Security Service (FSB) has instructed organizations responsible for Russia's critical information infrastructure to shut down their websites temporarily if they are unable to promptly update their software to address PHP vulnerabilities. The National Coordination Center for Computer Incidents (NKTsKI) issued this directive on October 22 through the state cyberattack defense system, GosSOPKA.
The Russian business news outlet RBC confirmed the authenticity of the document, which was obtained from three recipient organizations. NKTsKI has advised organizations to install the patched version of PHP, run antivirus scans on servers, and review logs for potential intrusions. If updating software quickly is not feasible, the FSB recommends considering the temporary restriction of external access to vulnerable web servers, including taking them offline.
At Meduza, a commitment to transparency is maintained by disclosing the use of artificial intelligence in the newsroom, with this story written by a human journalist and translated from Russian using an AI model adhering to strict editorial standards. Every draft is reviewed by a Meduza editor before publication. For those interested in Meduza's exclusive English-language content, a subscription can be obtained through a newsletter signup.
Written by urgent.news from Meduza (English)'s reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
