Help Me With HIPAA

We Need to Talk About Your Home Router

·36 min·3 clips
If you think your cybersecurity threats end at the office door, you're mistaken about your home router.
The episode opens with a dramatic 'we need to have a talk' hook, challenging the assumption that cybersecurity ends at the office. Hosts Donna Grendel and David Sims explain that home routers are a major vulnerability, with many being foreign-made and potentially spying on users or used in attacks. They describe instances where thousands of routers were found in botnets capable of targeting servers. The conversation shifts to how consumer-grade routers are commonly used in small businesses, prioritizing functionality over security. A key example is the Texas lawsuit against TP-Link, which alleges the company assembles Chinese-made routers in Vietnam to circumvent regulations. The hosts link this to broader supply chain issues, noting chip shortages and price fluctuations that complicate replacements. They discuss the rise of remote work, highlighting that many companies lack policies for securing home networks. Practical advice is given, including identifying router manufacturer and model, checking firmware updates, and changing default passwords. The hosts stress the importance of proactive replacement due to aging equipment and supply chain constraints. They also touch on password management and documentation practices, like taking screenshots of settings. The episode concludes by urging listeners to assess all technology assets, not just routers, in light of current challenges.

As heard by us

The router in the corner is part of the perimeter, whether anyone treats it that way or not.

Donna Grendel and David Sims make a simple but useful point: the home router belongs in the security perimeter, not off to the side as a harmless appliance.

Read the full review in PlayNext →

Why you'd press play

Your home router is not a harmless appliance.

Read the full recommendation in PlayNext →
Listen to the show on