# Fact: 'Where immediate remediation is not feasible, organisations should consider taki

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

'Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated' Who says it, its status (disputed), its sources, and its timeline from publication to this site.

Fact · advice · disputed

# 'Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated'

**Who says it:** UK NCSC, as quoted by the BBC · **Sources:** [BBC News](../../sources/bbc-live-ckgel5xp2xv9t/index.html) [NCSC UK](../../sources/ncsc-news-php/index.html) [CCCS](../../sources/cccs-al26-026/index.html)

That sentence is not on the NCSC page as captured at 08:09Z on 22 October. The page's offline advice is step 4 of 6 and is worded differently. The page was modified at 07:30Z that morning. The sentence's opening matches the Canadian CCCS text.

## Fact-check

**A2** Reported●●○○○○ disputed · Quote · verdict: **holds in part**

The NCSC page as captured (last-modified 07:30:02 GMT on 22 Oct) gives the offline advice as step 4 of 6 in other words ('If you are unable to apply the temporary mitigations ...'), so the quote is not verbatim in the party's own capture. The exact sentence is in the BBC, in LBC's article of 21 Oct 15:41 (before the page was modified), and in a CyberExpress copy of the BBC. That is an echo, A3, and points to an earlier NCSC wording.

| Capture checked | Result | What it says | sha256 of the text read |
|---|---|---|---|
| [bbc-live-ckgel5xp2xv9t](../../sources/bbc-live-ckgel5xp2xv9t/index.html) | carries | *"Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated," the NCSC said in a note* | c88b8c5f4c6bc07d |
| [ncsc-news-php](../../sources/ncsc-news-php/index.html) | partial | *or applying them would take too long, you should consider taking the system offline until it can be fully mitigated.* | a18ceeb011a3fe6f |
| [ncsc-news-php](../../sources/ncsc-news-php/index.html) | partial | *"last-modified": "Thu, 22 Oct 2026 07:30:02 GMT"* | 642ad2462903a32f |
| [cccs-al26-026](../../sources/cccs-al26-026/index.html) | partial | *Where immediate remediation is not feasible, organisations should consider isolating internet-facing applications from public networks until a fix can be applied.* | 9e7f44cc73e21ad5 |
| [lbc-uk-websites-offline](../../sources/lbc-uk-websites-offline/index.html) | carries | *The NCSC warned: “Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated.”* | 125176f10b5494a6 |
| [cyberexpress-php2shell-gov-sites](../../sources/cyberexpress-php2shell-gov-sites/index.html) | carries | *“Where immediate remediation is not feasible, organizations should consider taking the system offline until it can be fully mitigated,” the NCSC said.* | f45bc7599367343e |

Open tickets: [Finding-42](../../factcheck/index.html#Finding-42), [Finding-89](../../factcheck/index.html#Finding-89).

Graded in Run-1, resting on captures up to 2026-10-22 11:29 UTC. The scale is on [the fact-check page](../../factcheck/index.html#ladder).

## This fact over time
- 2026-10-21NCSC UK publishes [Critical security issue affecting PHP](../../sources/ncsc-news-php/index.html)
- 2026-10-21CCCS publishes [AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619](../../sources/cccs-al26-026/index.html)
- 2026-10-22 06:16 UTCBBC News publishes [PHP: Global scramble to fix critical cyber-security flaws as many websites taken offline - follow live](../../sources/bbc-live-ckgel5xp2xv9t/index.html)
- 2026-10-22 08:04 UTCSaved into the evidence vault: BBC News, then 2 more captures
- 2026-10-22 08:09 UTCSaved into the evidence vault: NCSC UK
- 2026-10-22 08:17 UTCSaved into the evidence vault: CCCS
- 2026-10-22Enters this site as disputed in v0.1.0 (reconstructed from git)

Published: when the source says it was published. Saved: the first capture into the evidence vault. The rest are this site: the release in which the fact first appeared and every release that changed its wording, sources or status.

## What it rests on

## Where this fact appears

In the briefings for:
CCaseyWebsite ownerTTaylorProject or programme managerJJordanBoard member or executiveSSamSecurity leadRRowanJournalistRRobinCISOAAveryCTOMMorganData protection officerJJamieHead of AppSecRRileyCommunications team
And on [every claim](../../claims/index.html#offline-ncsc).

## Every version of this fact
v1 · site v0.1.0 · 22 October 2026 · disputed
```
'Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated'
Who says it: UK NCSC, as quoted by the BBC
Status: disputed
Topic: advice
Sources: bbc-live-ckgel5xp2xv9t, ncsc-news-php, cccs-al26-026
```


---
site v0.8.0 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/facts/offline-ncsc/index.html