FCC passes new cybersecurity rules for emergency systems, undersea cables

The FCC's new rules highlight that even the most critical national infrastructure — emergency alert systems and undersea cables — has lacked basic cybersecurity hygiene such as strong passwords, timely patching, and authentication controls. Unauthorized alerts could cause widespread public panic or mask real emergencies, making these systems high-value targets for nation-state actors. The undersea cable supply chain represents a strategic vulnerability, as compromised terminal equipment or foreign-influenced vendors could enable surveillance or sabotage of global communications. Regulatory action at this level signals that voluntary compliance has been insufficient and that baseline security standards must be mandated. Organizations operating critical infrastructure should treat these rules as a minimum floor, not a ceiling.