{"url":"https://newsforagent.com/news/2026-10-21/msu-federal-credit-union-php-vulnerability","markdown_url":"https://newsforagent.com/news/2026-10-21/msu-federal-credit-union-php-vulnerability.md","title":"MSU Federal Credit Union Takes Website Offline Over PHP Flaw","headline":"MSU Federal Credit Union Pulls Website and Digital Banking After FBI PHP Warning","description":"MSU Federal Credit Union took its website and digital banking offline after an FBI warning about a PHP vulnerability.","section":"Incidents","published_at":"2026-10-21T21:52:54+00:00","modified_at":"2026-10-21T21:52:54+00:00","author":"News Desk","key_takeaways":["MSU Federal Credit Union temporarily took its website and digital banking services offline on October 21, 2026, after the FBI warned of a PHP vulnerability allowing remote code execution.","The credit union said it does not believe any member information was compromised and that debit and credit cards are still working.","The PHP Foundation said it released fixes for the vulnerabilities, with instructions on how to update systems."],"companies":[{"name":"MSU Federal Credit Union","is_primary":true,"profile_url":null,"website":"https://www.msu-fcu.org"}],"source":{"publisher":"Yahoo","title":"MSU Federal Credit Union website goes dark amid cyber vulnerability","url":"https://www.yahoo.com/news/us/articles/msu-federal-credit-union-website-195712697.html"},"other_sources":[{"publisher":"Talouselama","url":"https://www.talouselama.fi/uutiset/a/70cc7505-1a34-493c-b204-2902483eefaa"},{"publisher":"EIN Presswire","url":"https://www.einnews.com/article/951165136/live"},{"publisher":"Jiemian","url":"https://www.jiemian.com/article/15218136.html"}],"tags":["Incidents","MSU Federal Credit Union"],"body_markdown":"MSU Federal Credit Union temporarily took its website and digital banking services offline on October 21, 2026, after the FBI warned of a PHP vulnerability that could allow remote code execution. The credit union said it does not believe any member information was compromised. [Yahoo](https://www.yahoo.com/news/us/articles/msu-federal-credit-union-website-195712697.html) carried the report.\n\n## Why MSU Federal Credit Union Went Offline\n\nThe FBI's cyber division warned that the vulnerabilities could let malicious actors remotely execute code in PHP, the programming language that powers websites and web applications. The agency said that raised the risk of sensitive data and networks being compromised, and recommended that operators take websites offline if they cannot update them immediately. The National Security Agency, in a social media post, also recommended that organizations take their systems offline if they cannot do an immediate update.\n\nMSU Federal Credit Union said in a social media post that it took its website and digital banking services offline \"out of an abundance of caution.\" The credit union said it is working to update its systems and add more security measures. It said debit and credit cards are still working.\n\n\"We're working to restore digital access as quickly and safely as possible. Thank you for your patience,\" the credit union said.\n\nThe PHP Foundation, which includes developers who work on securing the programming language, said on October 21, 2026, that it had released fixes for the vulnerabilities, along with instructions on how to update systems. Artificial intelligence agents helped uncover the vulnerabilities.\n\n## Other Organizations Respond to the Same PHP Flaws\n\nValtori, Finland's state IT center, shut down public internet services at 12:45 on October 21, 2026, because of two critical PHP vulnerabilities, [Talouselama](https://www.talouselama.fi/uutiset/a/70cc7505-1a34-493c-b204-2902483eefaa) reported. Valtori expected a patch at 17:00 and said it was assessing the situation and possible mitigations.\n\nIwaiCosmo Securities announced a cyberattack on its online trading system that allowed unauthorized trades in seven customer accounts and exposed personal data of 4,975 people, [EIN Presswire](https://www.einnews.com/article/951165136/live) reported. The company restored accounts to pre-trade status with no losses, and the system remains operational after strengthened security measures.\n\nAeon Co., Ltd. Announced unauthorized access to some of its group companies' websites on October 21, 2026, [Jiemian](https://www.jiemian.com/article/15218136.html) reported. The company said it is conducting security checks and investigating whether personal information has been leaked, while also advancing system recovery work.\n\n## What Comes Next for MSU Federal Credit Union\n\nMSU Federal Credit Union said it is working to update its systems and add more security measures, and that it is working to restore digital access as quickly and safely as possible. The credit union's own site is at [msu-fcu.org](https://www.msu-fcu.org). The PHP Foundation said it released fixes for the vulnerabilities along with instructions on how to update systems.\n","publisher":{"name":"News for Agent","url":"https://newsforagent.com"}}