NSA Warning—Reboot Your Internet Router Now

NSA is warning U.S. internet users to reboot their routers now.

Russia’s GRU and APT28 actors exploit vulnerable routers worldwide to intercept and steal sensitive military, government, and critical infrastructure information.

TP-Link routers have been compromised via CVE-2023-50224.

NSA advises changing default usernames and passwords, disabling remote management from the Internet, updating to the latest firmware, and replacing end-of-support devices.

NSA recommends scheduling weekly reboots of routers, smartphones, and computers — reboot means turning devices off and on again.