Russian attack on Lviv region energy infrastructure cuts off 175 settlements – official

The Federal Security Service (FSB) has instructed organizations responsible for Russia's critical information infrastructure to shut down their websites temporarily if they are unable to promptly update their software to address PHP vulnerabilities. The National Coordination Center for Computer Incidents (NKTsKI) issued this directive on October 22 through the state cyberattack defense system, GosSOPKA.

The Russian business news outlet RBC confirmed the authenticity of the document, which was obtained from three recipient organizations. NKTsKI has advised organizations to install the patched version of PHP, run antivirus scans on servers, and review logs for potential intrusions. If updating software quickly is not feasible, the FSB recommends considering the temporary restriction of external access to vulnerable web servers, including taking them offline.

At Meduza, a commitment to transparency is maintained by disclosing the use of artificial intelligence in the newsroom, with this story written by a human journalist and translated from Russian using an AI model adhering to strict editorial standards. Every draft is reviewed by a Meduza editor before publication. For those interested in Meduza's exclusive English-language content, a subscription can be obtained through a newsletter signup.