President Biden has issued a ban on the sale of all Kaspersky security software in the U.S., effective immediately. The ban also extends to the use of Kaspersky software starting September 29, and it applies to consumers, government, and business organizations. Critically, the ban includes security updates for existing customers.

The Department of Commerce has issued what’s called a final determination prohibiting Kaspersky and its affiliates from transactions in the U.S. This makes it illegal to sell, integrate or license any Kaspersky cybersecurity software on national security grounds.

Following a review of Kaspersky’s cybersecurity transactions and services, the Bureau of Industry and Security found that they posed “unacceptable risks to the United States' national security and the security and safety of its people.” Specifically, BIS concluded that the risk factors involved were threats posed by the Russian Federation, vulnerabilities created by Kaspersky products for national security, and the impact of Russia exploiting them.

A BIS statement claims that “The manipulation of Kaspersky software, including in U.S. critical infrastructure, can cause significant risks of data theft, espionage, and system malfunction. It can also risk the country's economic security and public health, resulting in injuries or loss of life.”