# Fact: If an immediate update is not feasible, take the system offline until it can be 

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

If an immediate update is not feasible, take the system offline until it can be fully mitigated Who says it, its status (confirmed), its sources, and its timeline from publication to this site.

Fact · advice · confirmed

# If an immediate update is not feasible, take the system offline until it can be fully mitigated

**Who says it:** NSA Cybersecurity · **Sources:** [NSA Cyber on X](../../sources/nsa-x-2112903220209098897/index.html) [NSA](../../sources/nsa-press-php-4630238/index.html)

X post 13:45:58Z 21 October (10.1 million views at capture) and the press release.

## Fact-check

**A6** Established●●●●●● · Advice · verdict: **holds**

Both of NSA's own pages carry the advice in nearly the claim's words: the press release ('it is recommended that organizations take the system offline until it can be fully mitigated') and the X post (with the typo 'recommend'). The X post's snowflake decodes to 2026-10-21T13:45:58Z and the capture shows 10.1M views, as the note says.

| Capture checked | Result | What it says | sha256 of the text read |
|---|---|---|---|
| [nsa-x-2112903220209098897](../../sources/nsa-x-2112903220209098897/index.html) | carries | *If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated.* | 92ebce791a7b3542 |
| [nsa-press-php-4630238](../../sources/nsa-press-php-4630238/index.html) | carries | *If an immediate update is not feasible, it is recommended that organizations take the system offline until it can be fully mitigated.* | 8a8553ea1ffcd794 |

Graded in Run-1, resting on captures up to 2026-10-22 08:09 UTC. The scale is on [the fact-check page](../../factcheck/index.html#ladder).

## This fact over time
- 2026-10-21NSA publishes [NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities](../../sources/nsa-press-php-4630238/index.html)
- 2026-10-21 13:45 UTCNSA Cyber on X publishes [NSA Cyber on X: Effective Immediately ... two critical vulnerabilities](../../sources/nsa-x-2112903220209098897/index.html)
- 2026-10-22 08:09 UTCSaved into the evidence vault: NSA Cyber on X
- 2026-10-22 08:09 UTCSaved into the evidence vault: NSA
- 2026-10-22Enters this site as confirmed in v0.1.0 (reconstructed from git)

Published: when the source says it was published. Saved: the first capture into the evidence vault. The rest are this site: the release in which the fact first appeared and every release that changed its wording, sources or status.

## What it rests on

## Where this fact appears

In the briefings for:
CCaseyWebsite ownerTTaylorProject or programme managerJJordanBoard member or executiveSSamSecurity leadRRowanJournalistRRobinCISOAAveryCTOMMorganData protection officerJJamieHead of AppSecRRileyCommunications team
And on [every claim](../../claims/index.html#offline-nsa).

## Every version of this fact
v1 · site v0.1.0 · 22 October 2026 · confirmed
```
If an immediate update is not feasible, take the system offline until it can be fully mitigated
Who says it: NSA Cybersecurity
Status: confirmed
Topic: advice
Sources: nsa-x-2112903220209098897, nsa-press-php-4630238
```


---
site v0.8.0 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/facts/offline-nsa/index.html