FCC moves to ban new foreign-made routers over national security risks

USA Federal Communications Commission (FCC) is moving to block new foreign-made internet routers from entering the U.S. market, citing growing concerns that overseas supply chains could expose American networks to cyber threats at home.

The move expands the agency’s “closed list” that bans equipment deemed to pose an unacceptable risk to national security, effectively preventing new foreign-made routers from being authorized for sale in the United States

The order means new routers to be built in the United States or sold domestically must pass a national security review that examines ownership, supply chains and software control.

The FCC said the list includes communications equipment and services deemed to “pose an unacceptable risk to the national security of the United States or the safety and security of American persons.”

CASE ALLEGES SECURITY CAMERAS SOLD IN THE U.S. PRESENT UNDISCLOSED SURVEILLANCE RISKS

The agency warned that “malicious actors are exploiting vulnerabilities in foreign-made routers to attack American homes, disrupt networks, enable espionage, and facilitate intellectual property theft,” citing numerous cases where such devices have been used in cyberattacks targeting U.S. infrastructure.

The rule generally applies to devices manufactured outside the country, but is largely targeted at routers. Chinese origins. The world’s network hardware supply is heavily dependent on China for manufacturing and engineering.

Estimates in recent years show that devices with Chinese supply chain ties make up the majority of home routers used in the US

TP-Link, a China-based router maker and one of the top-selling brands on Amazon, has faced increasing scrutiny in Washington over broader concerns about cyber incidents and foreign-connected networking equipment.

GOOGLE REMOVES 9M DEVICE ANDROID HITCHAT NETWORK

A review of router manufacturing and supply chains by Fox News Digital shows that nearly all major router brands sold in the United States rely heavily on Chinese manufacturing, engineering talent or components, even if marketed as American or allied products.

Companies that have shifted production to countries like Vietnam often still rely on Chinese manufacturers and engineering teams; This means the supply chain footprint remains largely unchanged.

Key elements of router development, including firmware and hardware design, are often supported by engineering teams based in China, raising concerns about vulnerabilities in commonly used networking equipment.

FCC ANNOUNCES BAN OF NEW CHINESE-MADE UAVS DUE TO NATIONAL SECURITY CONCERNS

These risks have already surfaced in real-world cyber operations.

In 2023, the Department of Justice disrupted a network of hundreds of compromised US home and small business routers. Chinese state-backed hackers Known as “Typhoon Volt”. Infected devices were used to disguise the origin of cyberattacks targeting critical infrastructure, allowing malicious traffic to appear to originate from within the United States.

The move expands the agency’s “Covered List,” which bans equipment deemed to pose an unacceptable risk to national security, effectively preventing new foreign-made routers from being authorized for sale in the United States. (iStock)

By routing activity through compromised devices, hackers can make it difficult to track attacks and maintain access on targeted networks.

A single router often connects dozens of devices in a home or small business, including phones, laptops, security cameras, smart TVs, and baby monitors. A compromised device can give attackers visibility into network traffic and a foothold to move between connected systems or launch additional attacks.

U.S. officials say the broader campaign targets sectors such as energy, water, telecommunications and transportation and is part of an effort to gain access that could be used to disrupt systems during a future conflict.

The FCC’s move is the latest step in a broader initiative in Washington to reduce reliance on foreign, and especially Chinese-related, technologies in critical sectors including telecommunications equipment, semiconductors and consumer applications.

A single router often connects dozens of devices in a home or small business, including phones, laptops, security cameras, smart TVs, and baby monitors. (Chip Somodevilla/Getty Images)

Supporters of the policy say it targets long-standing supply chain risks and reduces the chances of foreign competitors gaining access to U.S. networks. But given that most routers sold in the U.S. are manufactured abroad, the rule could strain supply chains and raise prices.

CLICK TO DOWNLOAD FOX NEWS APPLICATION

The policy does not apply to routers that have already been legally purchased or are currently in use. Companies can continue to sell pre-certified routers that are already in the U.S., but once that inventory runs out, new foreign-made models will be effectively blocked unless they pass national security review.

The rule does not mean that routers currently in American homes are known to be compromised. But cybersecurity officials have long warned that old or unpatched devices can be vulnerable and, in some cases, used as part of larger botnet networks that support cyberattacks.

The Chinese embassy and the relevant router companies could not immediately be reached for comment.