FCC Blocks Foreign-Made Routers – 2026-03-30

This episode of Talkin' Bout [Infosec] News dives into the FCC's recent decision to add all foreign-manufactured consumer-grade routers to a 'covered list' deemed a national security risk, effectively banning new foreign-made routers from U.S. use. The hosts debate the practicality and intent behind the move, noting it doesn't affect existing routers or retail stock, and question whether it's a meaningful security step or political grandstanding. They explore the irony of the rule, given that most U.S. tech companies—including Cisco, Netgear, and Ubiquiti—still manufacture overseas. The discussion shifts to a major supply chain compromise by a newly emerged threat actor called Team PCP, which exploited the open-source vulnerability scanner Trivi to pivot into GitHub Actions, Docker Hub, npm, and other ecosystems, compromising over 500,000 corporate identities and exfiltrating 300GB of credentials. The hosts stress the importance of version pinning, least privilege, and proactive key rotation. They also cover a high-profile breach of Kash Patel’s Gmail by Iranian hackers, an OPSEC failure by Russian Fancy Bear actors, and the rise of AI-driven threat tools like Claude Cowork and Google’s WebMCP protocol, which enables AI agents to interact directly with websites—raising concerns about AI-powered malvertising and data manipulation. The episode closes with a mix of humor, warnings about AI overreach, and conference plugs. Key takeaways include: 1) The FCC router ban is largely symbolic and won’t impact most users due to grandfathering and existing stock; 2) Supply chain attacks like Team PCP’s are escalating, emphasizing the need for version pinning and supply chain visibility; 3) AI tools like Claude and WebMCP are powerful but dangerous—especially when misused or poorly secured; 4) Organizations must implement proactive key rotation and least privilege policies; 5) Open source projects need better security access and AI-assisted vulnerability testing; 6) The rise of AI-driven threat actors and tools demands a defensive AI arms race; 7) Always verify and monitor third-party CI/CD tools; 8) Security hygiene in open source and cloud environments is more critical than ever.