FSB Demands Elimination of PHP Vulnerabilities in Critical Infrastructure

The FSB has demanded that critical infrastructure organizations in Russia urgently eliminate dangerous PHP vulnerabilities. Websites of government agencies, banks, hospitals, and other companies are at risk.

Eliminating Vulnerabilities

If software updates cannot be applied quickly, access to vulnerable resources will be restricted, potentially leading to complete website shutdowns.

Reasons for the Demand

Previously, critical vulnerabilities with a severity rating of 9.2 out of 10 were discovered in PHP, which powers a large portion of the internet. These flaws allow hackers to remotely compromise websites and steal data.