Florida, Iowa, Montana and Nebraska sued TP-Link, saying it misled buyers about router security and its ties to China. For anyone buying routers, the federal ban that already blocks TP-Link's new models from US sale is the constraint that applies now.
Perspective Coverage
8 publishers
- Builder
- Builder 18%
- Operator
- Operator 53%
- Investor
- Investor 29%
Reality
- Evidence72
- Adoption60
- Hype gap+35
- Incentives70
- Confidence68
Justice says Chinese state operators laundered intrusions through infected routers and cameras in more than 130 countries since 2018. Source geography has been unreliable for years.
Perspective Coverage
7 publishers
- Builder
- Builder 32%
- Operator
- Operator 54%
- Investor
- Investor 14%
Reality
- Evidence66
- Adoption
- Not scored
- Hype gap+18
- Incentives58
- Confidence64
Sygnia found the China-nexus group running packet captures, a tac_plus credential hook and two layers of log suppression on the gear that authenticates the rest of the estate, and it never established how the router was breached.
Perspective Coverage
6 publishers
- Builder
- Builder 33%
- Operator
- Operator 53%
- Investor
- Investor 14%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+25
- Incentives55
- Confidence64
Asus clears the approval queue that now gates new foreign-made routers in the US
Asus is the biggest name so far through the Conditional Approval process that the Defense and Homeland Security departments run. Applicants hand over a component-level supply chain report and a time-bound plan to build the router in the US.
Reality
- Evidence60
- Adoption68
- Hype gap+28
- Incentives58
- Confidence55
US agencies assess Volt Typhoon's infrastructure access as pre-positioning for disruption
The advisory puts Volt Typhoon inside communications, energy, transport and water IT environments across the US and Guam, and says the behaviour does not look like espionage. The planning problem is outage, not data loss.
Reality
- Evidence70
- Adoption58
- Hype gap+12
- Incentives55
- Confidence62
Volt Typhoon-linked JDY botnet climbed back to 1,500 devices after the KV takedown
Black Lotus Labs counted about 650 JDY bots at the January 2024 low and more than 1,500 now, all of them fingerprinting exposed services soon after CVEs go public, with US military entities the most prominent target.
Publishers:lumen.com
Reality
- Evidence55
- Adoption50
- Hype gap+25
- Incentives70
- Confidence50
CISA's water-sector answer is an inventory: 100-plus exposed systems, most of them PLCs
July's intrusions into US water utilities did not need an exploit. They needed a PLC on a cellular modem with nothing in front of it, and CISA's August 21 guidance is an inventory job.
Reality
- Evidence62
- Adoption34
- Hype gap+14
- Incentives38
- Confidence55
DOJ names China's proxy quartermaster; the seizure took domains, not devices
Prosecutors say a Nanjing contractor rented IoT botnets and commercial proxies to the MSS and PLA from 2018. No individuals were charged, and the conscripted hardware stays conscripted.
Reality
- Evidence58
- Adoption47
- Hype gap+24
- Incentives62
- Confidence61
Insurers war-gamed 5,000 water utilities going down at once. That is a correlation problem.
About 30 insurance executives modelled a Chinese strike on 5,000 US water utilities. The exposure Volt Typhoon has built is not any single intrusion, it is the simultaneity.
Reality
- Evidence42
- Adoption22
- Hype gap+28
- Incentives58
- Confidence48
One packet reboots your Cisco VPN box, and Cisco will not say who is firing it
CVE-2026-20349 lets an unauthenticated attacker crash any ASA or FTD running Remote Access SSL VPN. There is no workaround, exploitation is confirmed, and attribution is a blank page.
Publishers:eclypsium.com
Reality
- Evidence61
- Adoption58
- Hype gap+9
- Incentives62
- Confidence63