3 min read
Let's Talk Mobile
We spend a great deal of time thinking about protecting our homes, our computers, and our networks. Yet the single most important device in our...
Home and home office internet routers have become a major point of failure for privacy and digital security concerns. Routers are more vulnerable than other devices mostly because they function as a front door to the internet - it's where everything comes in and goes out. But, according to a recent study of 127 router models across the board, the level of security is like having no door at all, much less lock and key.
The report we're referencing is a white paper by the German firm Fraunhofer Institute for Communication, published in June 2020. The analysis covers 127 router models used primarily for personal use like home, home offices, professional practices, and in many cases, small businesses.
Router vendors analyzed in the study include:

The report's conclusions speak for themselves:
"Our results are alarming.
There is no router without flaws. 46 of the routers did not get any security update within the last year.
Many routers are affected by hundreds of known vulnerabilities. Even if the router got recent updates, many of these known vulnerabilities were not fixed.
Some routers have hackable or even well known passwords that cannot be changed by the user."
From the executive summary by P. Weidenbach and J v.Dorp, June 2020
Click for the full report by the Fraunhofer Institute for Communication.
First, routers are more vulnerable to cyber risk than other internet devices for the following reasons:
According to the report, the security problems with personal routers go far past the list above and are systemic to the industry. The most significant drivers are:
In his conclusion from reading the report, security guru Bruce Schneier says:
"We know the reasons for this.
Most routers are designed offshore, by third parties, and then private labeled and sold by the vendors you’ve heard of.
Engineering teams come together, design and build the router, and then disperse. There’s often no one around to write patches, and most of the time router firmware isn’t even patchable.
The way to update your home router is to throw it away and buy a new one.
3 min read
We spend a great deal of time thinking about protecting our homes, our computers, and our networks. Yet the single most important device in our...
5 min read
A massive cyberattack made headlines — and the weapons it used might be sitting in your home or office right now.
5 min read
In our last post, we introduced the three primary attack surfaces every family needs to understand: email, devices, and networks. Today we're going...