Connect with us

Technologies

Controversy Brews: US Government Targets Banning Top Wi-Fi Router

Federal departments and agencies are joining forces in an effort to ban TP-Link routers due to concerns about national security risks.

TP-Link routers might not be available for much longer in the US, according to a Washington Post report last week. A potential ban is looking increasingly likely, as more than half a dozen federal departments and agencies back the proposal,

The news first broke in December of last year, when The Wall Street Journal reported that investigators at the Departments of Commerce, Defense and Justice had all opened probes into the company due to national security risks stemming from its ties to China. Since then, news on the TP-Link front has been relatively quiet.

Now, the proposal has gained interagency approval.

Read more: I Asked 4 Cybersecurity Experts If They Would Still Use a TP-Link Router

Why are plans to ban TP-Link routers being pushed?

“Commerce officials concluded TP-Link Systems products pose a risk because the US-based company’s products handle sensitive American data and because the officials believe it remains subject to jurisdiction or influence by the Chinese government,” the Washington Post reported. 

TP-Link’s ties to the Chinese government are only allegations. The company — technically called TP-Link Systems — has strenuously denied to me in the past that it’s a Chinese company. 

“As an independent US company, no foreign country or government, including China, has access to or control over the design and production of our products,” a TP-Link spokesperson told CNET.

The history of the TP-Link routers

TP-Link was founded in Shenzhen, China, in 1996 by two brothers, Jeffrey (Jianjun) Chao and Jiaxing Zhao. In October 2024, two months after members of the House Select Committee called for an investigation into TP-Link routers, the company split into two: TP-Link Technologies and TP-Link Systems.

The latter is headquartered in Irvine, California, and has approximately 500 employees in the US and 11,000 in China, according to the Washington Post report. TP-Link Systems is owned by Chao and his wife. 

“TP-Link’s unusual degree of vulnerabilities and required compliance with [Chinese] law are in and of themselves disconcerting,” the lawmakers wrote in October 2024. “When combined with the [Chinese] government’s common use of [home office] routers like TP-Link to perpetrate extensive cyberattacks in the United States, it becomes significantly alarming.”

The company has become a dominant force in the US router market since the pandemic. According to the Journal report, it grew from 20% of total router sales in 2019 to around 65% this year. TP-Link disputed these numbers to CNET, and a separate analysis from the IT platform Lansweeper found that 12% of home routers currently used in the US are made by TP-Link. More than 300 internet providers issue TP-Link routers to their customers, according to the Wall Street Journal report. 

Why are TP-Link routers being investigated?

Separately, the Department of Justice’s antitrust division is investigating whether TP-Link engaged in predatory pricing tactics by artificially lowering its prices to muscle out competitors. 

CNET has several TP-Link models on our lists of the best Wi-Fi routers and will monitor this story closely to see if we need to reevaluate those choices. 

“We do not sell products below cost. Our pricing is not only above cost but contributes a healthy profit to the business,” a TP-Link spokesperson told CNET. 

The potential ban has been through an interagency review and is currently in the hands of the Department of Commerce. According to the Washington Post report, sources familiar with the details of the ban said the Trump administration’s ongoing negotiations with China have made the chances of a ban less likely in the near future. 

“Any concerns the government may have about TP-Link are fully resolvable by a common-sense mix of measures like onshoring development functions, investing in cybersecurity, and being transparent,” the spokesperson said. “TP-Link will continue to work with the US Department of Commerce to ensure we understand and can respond to any concerns the government has.”

Don’t miss any of our unbiased tech content and lab-based reviews. Add CNET as a preferred Google source.

How worried should you be about your TP-Link router?

I wrote a few months ago that I wasn’t in any rush to replace my own TP-Link router, and that’s essentially how I still feel today. 

When the news first broke last December, I asked four cybersecurity experts whether they would still use a TP-Link router. One gave a strong “no.” Another said there is “risk for a consumer.” And two declined to answer the question directly. 

Itay Cohen was one of the authors of a 2023 report that identified a firmware implant in TP-Link routers linked to a Chinese state-sponsored hacking group. He told me in a previous interview that similar implants have been found on other router brands manufactured all over the world.

“I don’t think there’s enough public evidence to support avoiding routers from China outright,” Cohen said. “The vulnerabilities and risks associated with routers are largely systemic and apply to a wide range of brands, including those manufactured in the US.”

I heard a version of that from every cybersecurity expert I spoke with. TP-Link has security flaws, but so do all routers, and I couldn’t point to any that showed collaboration with the Chinese government specifically. 

“We’ve analyzed an astonishing amount of TP-Link firmware. We find stuff, but we find stuff in everything,” said Thomas Pace, CEO of cybersecurity firm NetRise and former security contractor for the Department of Energy.

That said, it’s entirely possible that the government is aware of vulnerabilities that the public is not.

For now, I’m still comfortable using a TP-Link router knowing I follow some basic best practices for network security, but my risk tolerance may be higher than it is for others. 

How to protect your network if you have a TP-Link router

If you’re one of the millions of Americans who uses a TP-Link router, the news of a potential ban might be unnerving.

A Microsoft report from last year found that TP-Link routers have been used in “password spray attacks” since August 2023, which typically occur when the router is using a default password.

Here’s what you can do to protect yourself right now:

Update your login credentials. A shocking amount of router attacks occur because the user never changed the default login credentials set by the router manufacturer. Most routers have an app that lets you update your login credentials, but you can also type your router’s IP address into a URL. These credentials are different from your Wi-Fi name and password, which should also be changed every six months or so. As always with passwords, avoid common words and character combinations, longer passwords are better and don’t reuse passwords from other accounts. 

Use a VPN. If you’re worried about prying eyes from the Chinese government or anyone else, the single best thing you can do to ensure your connection remains private is to use a quality VPN. Privacy-minded folks should look for advanced features like obfuscation, Tor over VPN and a double VPN, which uses a second VPN server for an added layer of encryption. You can even install a VPN on your router directly so that all your traffic is encrypted automatically.

Turn on the firewall and Wi-Fi encryption. These are typically on by default, but now is a good time to make sure they’re activated. This will make it harder for hackers to access the data sent between your router and the devices that connect to it. You can also find these settings by logging into your router from its app or website.

Consider buying a new router. I always recommend buying your own router instead of renting one from your internet service provider. This is mostly a cost-saving measure, but if your ISP uses TP-Link equipment, now might be a good time to switch to another brand. The main thing to look for is WPA3 certification — the most up-to-date security protocol for routers.

Update your firmware. TP-Link’s spokesperson told me last year that customers should regularly check for firmware updates to keep their router secure. “To do this, customers with TP-Link Cloud accounts may simply click the ‘Check for Updates’ button in their product’s firmware menu,” the spokesperson said. “All other customers can find the latest firmware on their product’s Downloads page on TP-Link.com.”

Technologies

China indicates rare earths will keep flowing to EU, regardless of U.S. trade deal expiration

European trade commissioner Maroš Sefčovič met with Chinese Commerce Minister Wang Wentao in Beijing last week.

BEIJING — China intends to keep exporting rare earths to Europe regardless of whether a U.S. trade deal with Beijing gets extended past January.

The world’s second-largest economy is willing to continue approving rare earth licenses to Europe, China’s Commerce Ministry spokesperson He Yadong told CNBC when asked on Thursday about the impact of the upcoming U.S. deadline.

Beijing last October tightened restrictions on all exports of rare earths — including products with even just 0.1% of China-sourced rare earths. The move followed a new U.S. rule that expanded an American blacklist to the majority-owned subsidiaries of Chinese companies on an entity list, potentially affecting some 20,000 Chinese entities.

However, both the U.S. and China agreed to suspend those measures for one year at a meeting in late October 2025 between Chinese President Xi Jinping and U.S. President Donald Trump. Ahead of the leaders’ latest summit last month, U.S. Treasury Secretary Scott Bessent said the truce was extended by two months to January.

Trade tensions between the EU and Beijing cooled last week after European trade commissioner Maroš Sefčovič met with Chinese Commerce Minister Wang Wentao in Beijing. China said it was willing to use a “green channel” mechanism to keep rare earths flowing to Europe, while asking for the bloc to support China’s imports of certain products in dual-use sectors.

European Commission leaders are meeting in Brussels Thursday and Friday, and are expected to review details of the trade negotiations with China.

Continue Reading

Technologies

Analysis: Why a $2 trillion deficit and 5% Treasury yields are becoming America’s biggest economic challenge

Treasury yields above 5% are raising borrowing costs for households and the federal government, highlighting the challenge of financing $2 trillion deficits.

Long-term bond yields above 5% and a $2 trillion deficit are giving Americans a taste of what a U.S. debt crisis would be like. A true emergency would hurt much more, and isn’t baked in. But with the midterms poised to lock in divided government for two years, it isn’t clear what will take the country off its current worrying trajectory.

Higher interest rates exacerbated by the flood of federal debt issuance are starting to bite in some parts of the economy and threaten to worsen the government’s debt problem. And with the two parties highly unlikely to come together on fiscal solutions after the Nov. 3 midterms, any fixes are years off in the future.

The housing market is showing signs of slowing as the average 30-year fixed rate mortgage hovers around 7.5%. Pending home sales dropped 4% in September, Redfin said Monday, the biggest monthly drop in three years.

Mortgage rates track the 10-year Treasury yield

Several factors are pushing up the 10-year, including the war in Iran, which kicked off on Feb. 28 and precipitated the rise in long-term yields. Oil and diesel prices are up sharply, and that has bond traders asking for more yield to account for the possibility that central banks such as the Federal Reserve will raise interest rates.

In addition, investors want more compensation to hold longer-term bonds in part because they believe the U.S. government will continue to flood the market with them. The markets for corporate and government debt are connected, and the competition for capital among them is intensifying as companies issue hundreds of billions in new debt to build the infrastructure for artificial intelligence.

Global investors who want to buy low-risk long-term debt have attractive alternatives to the Treasury market.

If the U.S. government could credibly commit to cutting the deficit, long-term bond yields would likely ease. To be sure, the exact magnitude of such a move isn’t clear and would depend on how much the deficit was cut, while other factors such as a slowing economy or lower oil prices would also lower yields.

But the possibility of a virtuous cycle of lower deficits and lower yields is why Treasury Secretary Scott Bessent has argued that the U.S. ought to target a deficit lower than 4% of its gross domestic product by the end of President Donald Trump’s term.

There is almost no way the U.S. will hit that target. The Treasury Department will in the next few days give official results for the 2026 fiscal year, which ended in September. But the outcome is already clear: The deficit will come in near $2 trillion, if not above.

That is likely to put the deficit in the range of 6.0-6.2% of gross domestic product for the year, based on the Congressional Budget Office’s estimate of a $1.993 trillion deficit and a projection of third quarter GDP.

Higher rates make debt reduction tougher. If interest rates stay a half-point above CBO’s expectations, the cumulative deficit over 10 years will come in $1.9 trillion higher, the agency estimates. If rates overshoot by 1.5 points, that adds $6 trillion in deficits.

CBO expects the 10-year Treasury to average 4.3% over that period, compared to 5.3% today. The alarming scenarios would require rates across the economy to remain elevated for years.

“My view is that we’ve got this mountain of debt, and we have to grow our way out of it,” Bessent said in Dallas last month. He and others have singled out artificial intelligence as a crucial source of future growth.

AI could help but can’t fix the problem entirely. It would take a decade of 7.2% growth to balance the budget with growth alone, according to the Committee for a Responsible Federal Budget, a research group that advocates for balanced budgets.

GDP growth was recently revised up for the second quarter from 1.5% to 2.2% at an annualized rate. The acceleration that quickly would get us to 7.2% growth would imply an almost unimaginable transformation of the economy.

Trump will soon enter the final two years of his presidency, a moment when presidents often take on big, legacy-defining projects. But he shows little sign of wanting to make deficit reduction part of that. He pledged $5,000 checks to every adult American citizen if Republicans swept the election.

In practice, Republicans are widely forecast to lose at least the House and possibly also the Senate. Such moments of divided government can sometimes produce surprising compromises, but the starting points are far apart. Rep. Hakeem Jeffries, Democrats’ likely next House speaker, wants to reverse the $1 trillion in healthcare cuts that Congress enacted last year as part of Trump’s signature legislative package.

And that’s leaving aside the deep animosity between the parties.

The overall U.S. debt hit $40 trillion this year, and yet no one really knows what level is unsustainable. A full-on debt crisis likely remains much farther out in the future. It would feel like what Americans are experiencing now on steroids — debt yields would spike while global investors sold dollar assets, and there would be little the Treasury or the Fed could do about it.

For now, though higher yields are also attracting investors to U.S. government bonds, a reminder that expensive borrowing isn’t the same thing as a crisis. But the bottom line is that economics alone can’t solve the problem. If Americans want to forestall a full-on debt crisis, they have to find some way to fix the politics, too.

Continue Reading

Technologies

Key Details on Starshield, SpaceX’s Defense-Oriented Starlink Network

Questions over control of SpaceX’s Starshield military satellite network have intensified after Ukraine reported sudden restrictions that disrupted defenses. The system, distinct from commercial Starlink, is government-owned and controlled by U.S. authorities.

Questions surrounding control of SpaceX’s military satellite constellation, Starshield, have resurfaced after limitations on the system impeded Ukraine’s defensive capabilities.

Kyiv has leveled accusations against SpaceX

Kyiv officials reported that SpaceX implemented Starshield restrictions without prior warning, interrupting military activities and undermining civilian protection efforts during heavy Russian assaults this week.

Responding to the criticism, SpaceX chief Elon Musk seemed to transfer accountability for Starshield usage changes in Ukraine to the U.S. government and President Donald Trump. Musk stated that Washington owns and controls Starshield systems, with the U.S. military and ultimately the president setting any usage boundaries. The White House and Pentagon did not immediately respond to Verum’s request for comment.

Here’s an overview of Starshield and its distinctions from Starlink.

What is Starshield and how does it function?

Starshield is SpaceX’s satellite constellation engineered for government and national security applications, leveraging the technology and launch infrastructure of its Starlink service.

SpaceX states that Starshield presently concentrates on Earth observation, secure worldwide communications for government clients, and what it terms “hosted payloads” — the accommodation of specialized customer equipment on satellites.

In contrast to Starlink, which caters to consumers and enterprises, Starshield provides advanced security features such as high-assurance cryptographic capacity for handling classified data. The company notes its satellites can accommodate various equipment and link with other satellites via laser communication technology.

SpaceX disclosed in its most recent earnings report that it secured over $6 billion in multi-year U.S. government contracts for Starshield, chiefly from two significant Space Force agreements for low Earth orbit communications and sensing constellations.

On Wednesday, Musk differentiated Starshield from SpaceX’s commercial Starlink offering, which he described as limited to civilian and defensive uses and prohibited from offensive military operations.

How does Starshield contrast with Starlink?

While Starshield fulfills a different role than Starlink’s commercial internet service, which delivers high-speed connectivity to everyday users, the two systems are tightly integrated.

Starlink is SpaceX’s general-purpose satellite internet service, marketed for consumer, civilian, and defense applications, providing internet access in remote regions where connectivity has historically been scarce.

Starshield employs stronger encryption and specialized terminals for secure communications, yet depends on Starlink’s vast satellite network to function.

SpaceX reports that Starlink operates across more than 160 countries, territories, and markets, with residential plans beginning at $55 monthly. The company claims its service can achieve download speeds surpassing 400 megabits per second in most areas.

Continue Reading

Trending

Copyright © Verum World Media