FCC bans import of new foreign-made consumer routers due to security risks

The U.S. Federal Communications Commission (FCC) has banned the import and sale of new foreign-made consumer routers, citing unacceptable risks to national and cybersecurity. This action aims to protect Americans and critical communication networks. The ban applies to new router models unless they receive conditional approval from the Department of War or Department of Homeland Security, according to The Hacker News.

The FCC has added all foreign-produced consumer-grade routers to its Covered List, prohibiting their marketing and sale in the U.S. This decision stems from an Executive Branch determination that these devices introduce supply chain vulnerabilities and pose severe cybersecurity risks. Threat actors, including China-nexus groups like Volt Typhoon and Flax Typhoon, have exploited security flaws in these routers to infiltrate U.S. networks, conduct espionage, steal intellectual property, and launch attacks against critical infrastructure such as communications, energy, transportation, and water systems. Botnets composed of compromised foreign routers have been used for sophisticated attacks, including password spraying and unauthorized network access.

Source: The Hacker News