Find notable cyber news and cases, enriched with sources, timelines, and signals.

FCC bans new foreign-made consumer routers

Public Sector Action
First reported
Last updated
Happening score
H score 36
3 unique sources, 3 articles

Summary

Hide ▲

The U.S. Federal Communications Commission banned the import of new foreign-made consumer routers after concluding they pose unacceptable cyber and national security risks to U.S. communications networks. The devices were added to the FCC Covered List, with only narrow conditional approval exceptions available through the Department of Defense or Department of Homeland Security. The policy applies to consumer-grade routers as defined in NIST guidance. Existing routers already in use may continue operating, but the action is expected to sharply limit future imports of consumer router hardware. Officials linked the decision to abuse patterns associated with Volt Typhoon, Flax Typhoon, and Salt Typhoon, including password spraying, unauthorized access, espionage, and attacks on critical infrastructure.

Related Happenings

FCC extends router update waiver for deployed routers

Public Sector Action
First: 12.05.2026 00:15 Last: 12.05.2026 00:15 Sources 1

About this happening: The **FCC** eased its restrictions on **foreign-made consumer routers** and extended the update waiver for already deployed devices in the **US** through **January 2029**. The mov...

FCC extends security-update deadline for banned routers and drones

Public Sector Action
First: 11.05.2026 14:00 Last: 11.05.2026 14:00 Sources 1

About this happening: The **FCC** extended until **at least January 1, 2029** the deadline for vendors of banned **consumer-grade internet routers** and **foreign-made drone systems** to keep shipping...

NCSC-UK joint advisory on covert botnets and proxy networks

Public Sector Action
First: 23.04.2026 15:28 Last: 23.04.2026 15:28 Sources 1

About this happening: **NCSC-UK** and partner agencies issued a **joint advisory** warning that **China-nexus hackers** are using **hijacked consumer devices** as covert proxy networks to hide maliciou...

China-nexus hijacked-device proxy network campaign

Campaign
First: 23.04.2026 15:28 Last: 23.04.2026 15:28 Sources 1

About this happening: China-nexus hackers are **increasingly using** large-scale proxy networks of hijacked consumer devices to **evade detection**, making malicious traffic harder to trace and block....

CISA and NCSC-UK China-nexus covert device networks advisory

Advisory/Mitigation
First: 23.04.2026 15:00 Last: 23.04.2026 15:00 Sources 1

About this happening: **CISA** and **NCSC-UK** released a new advisory warning organizations about **Chinese government-linked** covert networks built from **compromised devices**. The guidance says we...

Timeline

  1. 26.03.2026 21:48 1 articles · 2mo ago

    FCC router ban may leave U.S. consumers and small businesses on older devices

    Victim Impact Update

    The FCC's March 23 ban on new foreign-made consumer-grade routers may leave U.S. consumers and small businesses using older devices longer, while businesses replacing network gear could face a more constrained and potentially more expensive market with fewer approved options and longer procurement cycles.

    Show sources
  2. 25.03.2026 14:30 1 articles · 2mo ago

    FCC bans foreign-made consumer routers

    Legal Policy Action Update

    The FCC issued a public notice banning the import and sale of consumer-grade internet routers made in foreign countries, placing those routers on the FCC’s covered list and allowing only conditional approval exceptions from the US Department of Defense or Department of Homeland Security after citing an unacceptable national security risk tied to the Volt, Flax and Salt Typhoon cyber-attacks.

    Show sources
  3. 25.03.2026 14:30 2 articles · 2mo ago

    FCC ban scope and effects are detailed

    Industry Or Public Sector Update

    Reporting dated March 25 added that the ban applies only to consumer-grade routers as defined in NIST Internal Report 8425A, that existing Wi-Fi and wired routers may continue operating without restriction, and that nearly all consumer-grade routers are produced outside the US, making the action effectively block most future consumer router imports.

    Show sources
  4. 25.03.2026 09:11 1 articles · 2mo ago

    FCC announces foreign-made router import ban

    Initial Disclosure

    The U.S. Federal Communications Commission announced a ban on importing new, foreign-made consumer routers because executive-branch reviewers judged them to pose unacceptable cyber and national security risks to U.S. communications networks.

    Show sources
  5. 25.03.2026 09:11 1 articles · 2mo ago

    Foreign-produced routers added to Covered List

    Legal Policy Action Update

    All consumer-grade routers manufactured in foreign countries were added to the Covered List, with Conditional Approval available only after review by the Department of War or the Department of Homeland Security; the approved list also noted drone systems and software-defined radios from SiFly Aviation, Mobilicom, ScoutDI, and Verge Aero, while Starlink Wi-Fi routers remained exempt because they are made in Texas.

    Show sources
  6. 25.03.2026 09:11 1 articles · 2mo ago

    FCC cites router abuse and security risks

    Technical Analysis Update

    The FCC and the National Security Determination said foreign-produced routers create a supply chain vulnerability that could disrupt the U.S. economy, critical infrastructure, and national defense, and that insecure small and home office routers have been used for network intrusion, disruption, cyber espionage, intellectual property theft, surveillance, exfiltration, and malware delivery.

    Show sources
  7. 25.03.2026 09:11 1 articles · 2mo ago

    Named threat actors abused foreign-made router botnets

    Campaign Scope Update

    U.S. officials linked foreign-made router abuse to China-nexus adversaries Volt Typhoon, Flax Typhoon, and Salt Typhoon, saying botnets of compromised routers were used against American communications, energy, transportation, and water infrastructure; the CovertNetwork-1658 botnet, also known as Quad7, was described as a highly evasive password spray platform assessed to be the work of Storm-0940.

    Show sources