Connected Devices

Google and industry partners disrupted the XCPE botnet, which Videostrong allegedly embedded in more than 1.3 million Android devices, and blocked command-and-control access affecting at least 10 million additional devices. The incident underscores procurement risks involving manufacturer trust, firmware integrity, and security monitoring throughout the lifecycle of connected-device deployments.

FCC Chairman Brendan Carr has named Commissioner Olivia Trusty to lead the rollout and implementation of the U.S. Cyber Trust Mark Program. The announcement establishes program leadership but includes no solicitation, contract, funding, schedule, or vendor details; contractors should monitor the FCC for implementation requirements and potential future acquisitions.

The **Federal Communications Commission** has restricted certain new foreign-made drones, Wi-Fi routers, and home robotic devices from entering the U.S. market without an exemption or special approval, citing cybersecurity and national security concerns. For government and other institutional buyers, model-level approval checks may be important to sourcing and replacement plans; approval delays could also limit product choice and affect acquisition timelines.