FSB orders Russian critical infrastructure websites taken offline over PHP vulnerabilities
Russia’s Federal Security Service’s cybersecurity center has ordered organizations that run the country’s critical information infrastructure to temporarily shut down their websites if they cannot quickly update their software to protect against the PHP vulnerabilities.
The National Coordination Center for Computer Incidents (NKTsKI) sent the directive on October 22 through the state cyberattack defense system GosSOPKA. The Russian business news outlet RBC obtained a copy, and three recipient organizations confirmed the document’s authenticity.
NKTsKI instructed organizations to install the patched version of PHP, scan servers with antivirus software, and review logs for signs of intrusion. If the system cannot be updated quickly, the FSB instructs them to “consider temporarily restricting external access to vulnerable web servers, up to and including taking them offline.”
At Meduza, we are committed to transparency about our use of artificial intelligence in the newsroom. The story you’re reading was written by one of our living, breathing journalists and translated from Russian using an AI model configured to follow our strict editorial standards. This translation process is the result of extensive testing and refinements to ensure our English-language coverage is timely and accurate. A Meduza editor reviews every draft before publication.
If you find any errors in this translation, please contact us at [email protected].
To read Meduza’s exclusive content in English, please subscribe to our newsletter.