FCC bans import of new consumer routers made overseas, citing security risks

The Federal Communications Commission (FCC) has issued a ban on the import of new consumer-grade routers manufactured overseas, citing significant cybersecurity risks primarily linked to China-backed hacking groups. The order targets all foreign-produced consumer routers but does not affect existing devices already in use. Exceptions for new imports may be granted if approved by the Departments of Defense or Homeland Security. The FCC emphasized that foreign-made routers pose "unacceptable risks" to U.S. national security, highlighting that China controls about 60% of the global consumer router market. The agency pointed to past incidents where malicious hackers exploited vulnerabilities in these routers to compromise U.S. households, disrupt networks, and facilitate cybercrime and surveillance. The FCC’s action stems from concerns that government-backed hackers and cybercriminals frequently target routers to gain access to home and business networks or to launch distributed denial-of-service (DDoS) attacks. Notably, Chinese espionage groups such as Salt Typhoon and Flax Typhoon have exploited vulnerabilities in both foreign and