FCC Bans New Routers Made Outside the US Over National Security Risks

SecurityWeek roundup: The FCC (backed by a White House determination) moved to block new consumer routers manufactured abroad over national security concerns. A broad open-source supply‑chain compromise by TeamPCP (with ties to Lapsus$) impacted GitHub Actions tags and shifted to NPM, Docker Hub, VS Code, and PyPI. Separately, Aleksei Volkov was sentenced in the US for brokering access used in Yanluowang ransomware operations, and HackerOne confirmed employee data was stolen in the Navia breach. The US DoE published a five‑year energy security plan (Project Armor) to harden critical energy‑in‑