FSB demands site shutdowns amid PHP vulnerability

FSB employees have sent a warning to all subjects of the Russian critical information infrastructure. This decision was a reaction to a recent PHP vulnerability that could lead to server compromise.

If it is impossible to promptly update the system to a safe version, it is recommended to temporarily abandon the sites. After installing the patch, it is necessary to check all servers using antivirus programs.

Special attention should be paid to analyzing event logs. Specialists strongly recommend checking logs for traces of unauthorized access or hacking attempts.

The recommendation applies to all organizations included in the critical infrastructure list. This includes information systems of government bodies, financial and energy structures, transport and medical institutions.