[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqNXg7dqumZ5YNdyHA-8owEv2DvUEKpURpixVTrSJ5yU":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":17,"status":18,"created_at":19,"published_at":20,"article":21,"tags":25,"podcasts":38,"controls":39},"53246b79-3a83-450c-aae4-576dd9452748","foreign-router-ban-highlights-supply-chain-security-risks","70a4776f-903d-49e8-af81-0a0b08d5f937","Foreign Router Ban Highlights Supply Chain Security Risks","The FCC's ban on foreign-made consumer routers demonstrates how supply chain vulnerabilities can create systemic national security risks. State-sponsored groups like Volt Typhoon successfully exploited these devices to conduct cyber espionage against critical infrastructure, showing how everyday consumer equipment can become attack vectors. This incident highlights that security isn't just about patching and configuration - it's about understanding and controlling the entire supply chain of technology products entering our networks.","**Immediate actions:**\n- This situation could have been prevented through stronger supply chain security frameworks implemented earlier, including mandatory security assessments for imported networking equipment, established secure development standards for router manufacturers, and regular security auditing of foreign-produced hardware\n\n**Long-term improvements:**\n- Organizations should implement supply chain risk management programs that evaluate vendors based on geographic risk, conduct security testing of all network equipment before deployment, and maintain inventories of all hardware with known provenance\n- Government oversight and regulatory frameworks for critical infrastructure components should be established proactively rather than reactively",[12,13,14,15,16],"CIS Control 15","NIST SP 800-161","NIST Cybersecurity Framework SC-30","ISO 27036","CISA Supply Chain Risk Management",{},"published","2026-03-25T19:07:59.898824+00:00","2026-03-25T19:07:59.719+00:00",{"id":7,"url":22,"slug":23,"title":24},"https:\u002F\u002Fhackread.com\u002Fus-bans-foreign-home-routers-national-security\u002F","us-bans-new-foreign-made-home-routers-over-national-security-fears","US Bans New Foreign-Made Home Routers Over National Security Fears",[26,32],{"id":27,"name":28,"slug":29,"description":30,"color":31},"c0dcc566-3654-4d70-8ede-262a198e732f","Regulatory Compliance","regulatory-compliance","GDPR, NIS2, DORA, sector-specific violations","#ec4899",{"id":33,"name":34,"slug":35,"description":36,"color":37},"f0c2a0af-58aa-4128-87c9-6acd30f2dc48","Supply Chain","supply-chain","Third-party risk, compromised dependencies","#8b5cf6",[],[40,44,48],{"slug":41,"name":42,"problem":43},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":45,"name":46,"problem":47},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":49,"name":50,"problem":51},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones."]