The most interaction people have with their router is the occasional turn-it-on-and-off-again when a slowdown occurs. This benign neglect, however, could be putting their data and even their bank accounts at risk. It’s important to regularly update router firmware to keep the security features up to date. All of your information is going to be passing through that router, So if it’s compromised, it can really impact your privacy and the security of your devices.
In October, for example, a pair of university researchers discovered a vulnerability that could allow attackers to access usernames, passwords, credit card details, emails, and more flowing through an encrypted WiFi network.
Routers can also be taken over for criminal activities such as illegal downloads and attacks on websites. In 2016, the Remaiten Worm, or KTN-Remastered, spread to numerous Linux-based routers by connecting to random IP addresses and trying out commonly used log-in credentials. Once it gained entry to routers, they were used in distributed denial of service (or DDoS) attacks on commercial websites.
The Problem With Firmware Updates
Router manufacturers typically roll out software updates throughout the year to address such vulnerabilities. In fact, Tejas Shah, Netgear’s chief information officer, says his company released nearly 200 fixes for its line of routers in 2017 alone. Not long ago, for instance, Netgear fixed a bug that threatened to make administrative permissions available to hackers, according to Shah.
But there’s a major catch. Consumers typically have to find, download, and install router updates themselves. And even computer experts rarely do that. A 2014 study (PDF) conducted by Tripwire found that fewer than half of IT professionals had recently updated the router firmware in their homes. Surprisingly, only 32 percent even knew how to do it. That means that most home routers never get important security updates.
