AntiMalware•October 14, 2026•🇷🇺Translated from Russian

Rostelecom Calls for 'Doomsday' Data Centers to Counter Drone Attacks and Infrastructure Risks

Rostelecom has called on Russian businesses to establish geographically dispersed backup data centers, referred to as ЦОДы судного дня or 'doomsday data centers,' to maintain operations after primary sites are lost.

At the RBC Tech forum, deputy chairman of the board Valery Ermakov stated that earlier infrastructure strategies focused on concentrating key services in a few locations for cost efficiency. This model has become vulnerable following drone strikes on data centers, forcing companies to incorporate previously unimaginable scenarios into recovery planning.

Ermakov proposed a micro-cellular architecture that distributes services across numerous sites, separates them geographically, and reserves spare capacity. The core question, he noted, has shifted from economic savings to determining what remains operational if a single facility goes offline.

Connecting these distributed sites requires robust high-speed backbone links. Ermakov highlighted that Russian trunk networks are already overloaded and that a significant portion of fiber optic cables was laid 20-30 years ago, raising the risk of capacity shortages.

Rostelecom presented its TEA NEXT line, stretching from Kaliningrad to Mongolia, as one source of additional transmission resources to mitigate potential deficits.

The urgency stems from recent attacks that halted operations at three Yandex data centers located in Sasovo, Kaluga, and Vladimir. The outages affected both company services and customers of Yandex Cloud, prompting Yandex to arrange accelerated data and service transfers to partner cloud providers.

Related articles

AntiMalware•Policy & Regulation

Russian Firms Accelerate Cybersecurity Strategy Adoption as Risk Reduction Emerges as Top Priority

A recent AM Live broadcast survey reveals that Russian small, medium, and large companies are increasingly developing information security strategies, with the share of organizations actively working on them rising from 9% to 28% year-over-year. The primary goal cited for 2027 is risk reduction and financial loss mitigation, selected by 78% of respondents compared to 55% previously. Key barriers have shifted, with insufficient source data now affecting 64% of companies and lack of top-management buy-in rising to 43%. Experts including Yaroslav Napalkov from MTS Bank and Nikolay Kazantsev from Securitm emphasized the need for risk-oriented approaches, three-year planning horizons with annual reviews, and early engagement with CEOs and stakeholders. Only 16% of firms have fully operationalized their strategies with metrics and cyber exercises, while personnel shortages remain the leading constraint at 59%.

AntiMalware•Policy & Regulation

VK Shares Rise 7.62% as Market Assesses Data Center Developments and Yandex Cloud Challenges

VK shares climbed sharply on October 12, reaching a peak increase of 7.62% to 134.2 rubles before moderating to a 6.6% gain at 132.95 rubles by evening. Analysts from Freedom Global linked the movement partly to the Ministry of Digital Development's announcement of joint measures with the Ministry of Defense to protect Russian data centers. Other observers at Finam suggested investors were pricing in potential client shifts from Yandex Cloud to competitors such as VK Cloud, which has already begun accelerated infrastructure placement for affected Yandex customers. The surge was also attributed to broader capital rotation away from the energy sector toward previously lagging technology stocks. While the confirmed price movement is clear, the exact drivers remain analytical interpretations rather than verified revenue impacts. The episode highlights how regulatory and infrastructure news can quickly influence valuations in the Russian cloud services market.

Habr•Policy & Regulation

Passphrases vs. Leetspeak Passwords: Why Four Random Words Outperform P@ssw0rd!2026

The article explains why a passphrase made of four randomly selected words provides far greater resistance to offline attacks than a complex-looking password constructed with substitutions and appended symbols. It details how password strength is measured in bits of entropy rather than visual complexity, showing that four words drawn from a 50,000-word list yield approximately 62 bits while common leetspeak transformations add almost none. The piece contrasts fast legacy hashing with modern slow algorithms such as Argon2 and emphasizes the protective effect of per-password salting. It criticizes registration forms that reward predictable patterns and highlights NIST guidance favoring length over mandatory character rotation. The author recommends diceware-style generation for master passwords and password managers for everything else, noting that passkeys ultimately eliminate the need for memorizable secrets altogether.

Habr•Policy & Regulation

Building the Foundation of Digital Trust: Why Identity Security Remains Undervalued

Identity Security is presented as one of the most underestimated pillars of cybersecurity because granting access involves trusting individuals with sensitive information and systems. The article examines the deep intersection of IT and security functions, the costs of manual access errors, and the need to align business processes with technical controls. It references a 2026 Identity Conf study showing 43.5% of organizations experienced errors in manual rights assignment and 33.5% left access for former employees. Recommendations draw on NIST Human-Centered Cybersecurity concepts, SP 800-53, and Russian FSTEC Order No. 117 to design lifecycle processes covering account provisioning, privilege reviews, and continuous monitoring. Models such as RBAC and ABAC are discussed alongside IGA and IdM solutions to ensure business permissions map correctly to application rights. The piece stresses that successful projects require joint IT and security efforts from the initial survey through pilot and acceptance phases while measuring both risk reduction and operational efficiency.