RZD Trunk Quantum Network Obtains FSTEC Attestation and Enters External Commercial Market
RZD’s trunk quantum network has successfully completed attestation by the Federal Service for Technical and Export Control (FSTEC). The official document confirms that the infrastructure fully complies with the regulatory requirements applicable to information systems of the second class of protection under Russian legislation.
This certification is far more than a formal document for RZD. It grants the company the legal right to provide commercial services based on its quantum network to third-party organizations, ranging from banks and industrial enterprises to medical institutions and transport companies. The primary focus of these services is the protection of critically important data.
Quantum communications offer a fundamentally higher level of security compared with traditional encryption. Any attempt to intercept the encryption keys is immediately detected because interference with the quantum channel changes the state of the transmitted particles, making the intrusion impossible to conceal. This capability is especially valuable for owners of critical information infrastructure objects, for whom conventional “complex passwords” are no longer considered sufficient protection.
The technology is already being actively tested in the financial sector. Among the organizations currently piloting quantum channels are the Bank of Russia, the Federal Treasury, the Financial University, and several of Russia’s largest banks. Potential future clients also include companies from the oil-and-gas industry, manufacturing, healthcare, and transportation sectors.
According to the Ministry of Digital Development, quantum communication technology has now reached a sufficiently high level of maturity. Further expansion of the quantum network until 2030 has been incorporated into the relevant departmental roadmap and the national project “Data Economy”.
Consequently, RZD is gradually evolving beyond its traditional role as a carrier of passengers and freight. The company is positioning itself as an operator of secure digital highways, where, in addition to conventional rail traffic, quantum keys will also travel along its infrastructure.
Related articles
OBEP Raids on Russian IT Firms: How to Safeguard Source Code, Servers and Blockchain Assets During Searches
Russian IT companies, Web3 projects and fintech services now face frequent visits from OBEP operatives conducting pre-investigative checks or searches under criminal cases. The article details the legal distinction between operational-search measures and formal searches, emphasizing article 164.1 of the UPK RF that prohibits seizure of physical servers in economic crime investigations. It explains how companies can demand data mirroring instead of hardware removal and how to invoke article 51 of the RF Constitution when pressured for encryption keys. Commercial secret regimes are presented as a tool to raise criminal liability for leaks and to request closed court proceedings. Practical checklists cover document verification, staff instructions, password retention and immediate calls to specialized criminal counsel. The guidance aims to prevent business paralysis while preserving evidence integrity during raids.
RWB Deploys Enterprise-Wide Database Access Control with Trino and Open Policy Agent
RWB has replaced fragmented manual database access processes with a centralized architecture built on Trino as the single entry point and Open Policy Agent for policy enforcement. The system enforces least-privilege access, mandatory auditing, and automated revocation tied to HR records while eliminating anonymous and password-based logins. Access requests now complete in 3–10 minutes instead of an average of four days, with 92 percent handled automatically. Key components include Keycloak for OIDC authentication, Vault for secrets, Kafka for security event streaming to SOC, and Kubernetes orchestration. Responsibility is split across AI & Data Security, Core DevOps, Access Management, SOC, and Trust & Safety teams. More than 1,250 PostgreSQL clusters and 90 projects are now connected, with real-time dashboards tracking adoption and policy health.
Russia Moves to Allow Biometric Data Processing for Suspects and Convicts Without Consent
Russian law enforcement agencies may soon gain the legal right to process biometric data of suspects, accused individuals, and convicted persons without requiring their personal consent. A corresponding draft bill has already been submitted to the government and is scheduled for review at the next cabinet meeting, according to TASS. The measure covers fingerprints, facial images, voice recordings, and other physiological or behavioral characteristics used for identification. If approved, prior permission from the individual will no longer be needed when biometrics are used in criminal proceedings. The change applies not only to those already convicted but also to suspects and accused persons whose guilt has not yet been established by a court. For ordinary citizens, enrollment in the Unified Biometric System remains voluntary and is used for remote identity verification when accessing financial and government services.
FAS Clears Russian Operators on 'Unlimited' Internet Claims Despite Speed Throttling to 128 Kbit/s
The Federal Antimonopoly Service has declined to investigate complaints regarding promises of unlimited internet and unrestricted roaming access made by major Russian mobile operators. The Association of Professional Users of Social Networks and Messengers argued that operators including Vimpelcom, MegaFon, MTS, and T2 Mobile mislead customers by advertising unlimited plans while throttling speeds to 128-512 Kbit/s after data caps are reached. FAS determined that information on official company websites does not qualify as advertising under Russian law. Operators maintain that the term unlimited remains accurate because no total data volume limit exists, only speed reductions detailed in service descriptions. The complainants and legal experts contend that FAS reviewed only technical parameter pages and ignored banners, promotional news, search ads, SMS, and push notifications that may meet legal criteria for advertising. The decision leaves consumers facing slow connections unsuitable for video or file downloads after initial allowances are exhausted.