US reportedly mulls TP-Link router ban over national security risk

US federal agencies have opened investigations into TP-Link after reporting that Chinese state-backed actors (Microsoft tracking Storm-0940) compromised thousands of internet-connected devices — largely TP-Link routers — to conduct password-spray attacks and credential theft that enabled follow-on intrusions into organizations across North America and Europe; TP-Link holds ~65% of the US home/small-business router market and supplies some government customers, prompting national-security concerns and discussion of a potential US sales ban, while TP-Link denies increased vulnerability and asserts separate supply chains.