Find notable cyber news and cases, enriched with sources, timelines, and signals.

FCC bans new foreign-made consumer routers

Public Sector Action
First reported
Last updated
Happening score
H score 33
3 unique sources, 3 articles

Summary

Hide ▲

The U.S. Federal Communications Commission banned the import of new foreign-made consumer routers after concluding they pose unacceptable cyber and national security risks to U.S. communications networks. The devices were added to the FCC Covered List, with only narrow conditional approval exceptions available through the Department of Defense or Department of Homeland Security. The policy applies to consumer-grade routers as defined in NIST guidance. Existing routers already in use may continue operating, but the action is expected to sharply limit future imports of consumer router hardware. Officials linked the decision to abuse patterns associated with Volt Typhoon, Flax Typhoon, and Salt Typhoon, including password spraying, unauthorized access, espionage, and attacks on critical infrastructure.

Related Happenings

CISA-led joint advisory on Russian router targeting

Public Sector Action
H score32 First: 14.07.2026 15:00 Last: 14.07.2026 15:00 Sources 1

About this happening: CISA and partner agencies released a joint cybersecurity advisory warning that Russian state-sponsored actors are targeting vulnerable networking devices in crit...

Cybersecurity agencies from 12 countries fresh warning / joint advisory for published on 2026-07-13

Public Sector Action
H score53 First: 13.07.2026 13:40 Last: 13.07.2026 13:40 Sources 1

About this happening: Cybersecurity agencies from 12 countries issued a fresh advisory urging defenders to harden vulnerable routers amid active targeting by a Russian state-sponsored cyber u...

FCC extends router update waiver for deployed routers

Public Sector Action
H score24 First: 12.05.2026 00:15 Last: 12.05.2026 00:15 Sources 1

About this happening: The FCC eased its restrictions on foreign-made consumer routers and extended the update waiver for already deployed devices in the US through January 2029. The mov...

FCC extends security-update deadline for banned routers and drones

Public Sector Action
H score24 First: 11.05.2026 14:00 Last: 11.05.2026 14:00 Sources 1

About this happening: The FCC extended until at least January 1, 2029 the deadline for vendors of banned consumer-grade internet routers and foreign-made drone systems to keep shipping...

NCSC-UK joint advisory on covert botnets and proxy networks

Public Sector Action
H score66 First: 23.04.2026 15:28 Last: 23.04.2026 15:28 Sources 1

About this happening: NCSC-UK and partner agencies issued a joint advisory warning that China-nexus hackers are using hijacked consumer devices as covert proxy networks to hide maliciou...

Timeline

  1. 26.03.2026 21:48 1 articles · 3mo ago

    FCC router ban may leave U.S. consumers and small businesses on older devices

    Victim Impact Update

    The FCC's March 23 ban on new foreign-made consumer-grade routers may leave U.S. consumers and small businesses using older devices longer, while businesses replacing network gear could face a more constrained and potentially more expensive market with fewer approved options and longer procurement cycles.

    Show sources
  2. 25.03.2026 14:30 1 articles · 3mo ago

    FCC bans foreign-made consumer routers

    Legal Policy Action Update

    The FCC issued a public notice banning the import and sale of consumer-grade internet routers made in foreign countries, placing those routers on the FCC’s covered list and allowing only conditional approval exceptions from the US Department of Defense or Department of Homeland Security after citing an unacceptable national security risk tied to the Volt, Flax and Salt Typhoon cyber-attacks.

    Show sources
  3. 25.03.2026 14:30 2 articles · 3mo ago

    FCC ban scope and effects are detailed

    Industry Or Public Sector Update

    Reporting dated March 25 added that the ban applies only to consumer-grade routers as defined in NIST Internal Report 8425A, that existing Wi-Fi and wired routers may continue operating without restriction, and that nearly all consumer-grade routers are produced outside the US, making the action effectively block most future consumer router imports.

    Show sources
  4. 25.03.2026 09:11 1 articles · 3mo ago

    FCC announces foreign-made router import ban

    Initial Disclosure

    The U.S. Federal Communications Commission announced a ban on importing new, foreign-made consumer routers because executive-branch reviewers judged them to pose unacceptable cyber and national security risks to U.S. communications networks.

    Show sources
  5. 25.03.2026 09:11 1 articles · 3mo ago

    Foreign-produced routers added to Covered List

    Legal Policy Action Update

    All consumer-grade routers manufactured in foreign countries were added to the Covered List, with Conditional Approval available only after review by the Department of War or the Department of Homeland Security; the approved list also noted drone systems and software-defined radios from SiFly Aviation, Mobilicom, ScoutDI, and Verge Aero, while Starlink Wi-Fi routers remained exempt because they are made in Texas.

    Show sources
  6. 25.03.2026 09:11 1 articles · 3mo ago

    FCC cites router abuse and security risks

    Technical Analysis Update

    The FCC and the National Security Determination said foreign-produced routers create a supply chain vulnerability that could disrupt the U.S. economy, critical infrastructure, and national defense, and that insecure small and home office routers have been used for network intrusion, disruption, cyber espionage, intellectual property theft, surveillance, exfiltration, and malware delivery.

    Show sources
  7. 25.03.2026 09:11 1 articles · 3mo ago

    Named threat actors abused foreign-made router botnets

    Campaign Scope Update

    U.S. officials linked foreign-made router abuse to China-nexus adversaries Volt Typhoon, Flax Typhoon, and Salt Typhoon, saying botnets of compromised routers were used against American communications, energy, transportation, and water infrastructure; the CovertNetwork-1658 botnet, also known as Quad7, was described as a highly evasive password spray platform assessed to be the work of Storm-0940.

    Show sources