FCC approves cybersecurity label for consumer devices

The FCC approved the voluntary U.S. Cyber Trust Mark to label consumer IoT devices that meet NIST-derived baseline security, including third-party lab testing and QR codes linking to device security details (support period, update expectations, default password guidance, SBOM availability). The program aims to raise market security standards and may expand beyond consumer IoT, with U.S. coordination for international recognition; major manufacturers and retailers signaled interest, though firms on the FCC covered list are excluded. Supporters praise the step while noting gaps (e.g., no explicit requirements for encryption, vulnerability reporting, or privacy), and experts urge more prescriptive criteria.