FCC Bans New Foreign-Made Routers Over Supply Chain and Cyber Risk Concerns
FCC bans import of new foreign-made consumer routers citing cyber and national security risks.
The U.S. Federal Communications Commission has banned the import of new foreign-manufactured consumer routers, citing unacceptable supply chain vulnerabilities and cybersecurity risks to critical infrastructure. The ban follows a national security determination that foreign routers have been exploited by state-sponsored actors like Volt Typhoon, Flax Typhoon, and Salt Typhoon, as well as the Chinese botnet CovertNetwork-1658 (Quad7), to compromise U.S. networks and critical infrastructure. Existing routers already in circulation remain unaffected, and manufacturers can apply for Conditional Approval from DoW or DHS.
AI summary of the linked source. Not reviewed by an editor. How this works
The lesson from this incident
Full lessonThe FCC's ban on new foreign-manufactured consumer routers highlights critical supply chain vulnerabilities that have been exploited by state-sponsored threat actors. Foreign routers were compromised by groups like Volt Typhoon and Chinese botnets to infiltrate U.S. networks and critical infrastructure. This demonstrates how hardware supply chain compromises can create persistent backdoors that are difficult to detect and remediate. The incident underscores the national security implications of using network infrastructure equipment from untrusted sources.
What helps against this
How we list vendors- External attack surface management (EASM)
You find your forgotten internet-facing systems before attackers do.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — CovertNetwork-1658
- malware — Quad7