Routers from China-based TP-Link a national security threat, US lawmakers claim

U.S. lawmakers are urging the Commerce Department to investigate the cybersecurity risks associated with routers from the Chinese company TP-Link Technologies. Representatives John Moolenaar and Raja Krishnamoorthi expressed concerns in a letter to Commerce Secretary Gina Raimondo, highlighting the "unusual degree of vulnerabilities" found in TP-Link routers. They requested a response by the end of August regarding whether these products should be restricted in the U.S. The lawmakers pointed to China's stringent data protection laws, which they argue compel companies like TP-Link to comply with government demands, raising national security concerns. They also referenced cyber activities by the Chinese APT group Volt Typhoon, which has targeted home routers to launch attacks on U.S. critical infrastructure. Past incidents have shown that vulnerabilities in TP-Link routers have been exploited by hackers to create botnets and disrupt services. TP-Link has stated that it does not sell routers in the U.S. and has undergone a global restructuring to separate its operations in China from its U.S. entity. U.S. national security agencies have long been wary of Chinese regulations that may allow government hackers to exploit vulnerabilities before they are disclosed publicly.

- U.S. lawmakers are calling for an investigation into TP-Link routers due to cybersecurity vulnerabilities.

- Concerns are raised about compliance with Chinese government data demands.

- The Chinese APT group Volt Typhoon has been linked to attacks using compromised routers.

- TP-Link claims it does not sell routers in the U.S. and has restructured its operations.

- National security agencies worry about Chinese regulations affecting vulnerability reporting.