Consumer Groups Push IoT Security Bill to Address End-of-Life Concerns

The report warns that the rapid growth of connected devices and widespread end-of-life (EoL) IoT hardware with no security updates creates large-scale risk: nation-state actors (e.g., Volt Typhoon), other threat groups (Flax Typhoon), and botnet operators (Matrix leveraging Mirai) are actively exploiting unpatched routers, cameras, and NAS devices. It describes the operational impacts, challenges in sourcing secure replacements, and a proposed Connected Consumer Products End of Life Disclosure Act that would require manufacturers and ISPs to disclose EoL dates and remove unsupported devices to reduce exploitation risk.