US lawmakers believe TP-Link's networking products have an 'unusual level of vulnerabilities' that makes them vulnerable to hackers

Two US Congressmen have asked the Biden administration for an investigation into the possibility that networking products manufactured by the widely used TP Link brand could be used as a covert spying device on Americans or to carry out cyber attacks.

Republican Representative John Moolenaar, and Democratic Representative Raja Krishnamoorthi requested a formal investigation from the US Department of Commerce citing potential national security risks. According to a letter published by the Select Committee on Chinese Communist Party (via Reuters), the "TP-Link's uncommon degree of vulnerability and required compliance with PRC laws are in and themselves disconcerting".

TP-Link products can be found in critical facilities including US military bases.

Last year, TP-Link devices were used to launch an assault on European foreign affairs organizations. TP-Link firmware had been infected by malware, allowing attackers to run shell commands, gain access to files, and relay communications among devices on the network. TP-Link's vulnerabilities are not unique. Other manufacturers, such as Cisco and Netgear, have also been used by foreign adversaries to launch attacks.

The US government has been threatening Chinese companies for years. Huawei and ZTE have been forced off the US market. TikTok, another well-known Chinese company with similar spying concerns, is also a well-known example.

The majority of end users are aware that it is important to keep PC and device software up-to-date for security purposes, but they are less aware of the dangers associated with router based attacks. I'd bet that most home users have not updated their router's software. It's a good idea to update your router's firmware now.