wifi router
– Getty Images

CableLabs released updated guidance aimed at strengthening gateway devices just a handful of weeks after the Federal Communications Commission (FCC) clamped down on router imports over cybersecurity risks.

The group’s Gateway Device Security Best Common Practices 2.0 (GDS BCP 2.0) provides guidance on device configuration and access control across network interfaces. The update includes a software bill of materials that acts as a “list of ingredients that make up software components” to support security and software supply chain risk management.

Amid growing concerns about quantum-enhanced attacks, GDS BCP 2.0 calls for the phase out of legacy cryptographic algorithms in favor of quantum-resistant key encryption protocols.

“Gateway Device Security BCP 2.0 is more than an update. It’s a continued commitment to safeguarding broadband networks in an era of rapid technological change,” CableLabs noted in a blog post. “By closing gaps, promoting supply chain transparency, and preparing for a quantum-secure future, we are helping the industry remain resilient and ready for what lies ahead.

This is the first GDS BCP update since 2021, and comes amid growing scrutiny over device security.

In late March, the FCC took the unprecedented decision to ban imports of all foreign-produced routers, citing supply chain vulnerabilities that could impact critical infrastructure and national defense. All consumer-grade devices produced outside the U.S. are subject to the order, though devices already purchased prior to the ban aren’t affected.

Following the order, FCC Chairman Brendan Carr said the agency will “continue [to] do our part in making sure that U.S. cyberspace, critical infrastructure, and supply chains are safe and secure.”