The least glamorous machine in the house still sits between every laptop and the open internet. Home routers collect dust, ancient default passwords, and firmware that last changed when the kids were in primary school. Attackers noticed years ago. ISPs are noticing in public now.
Automatic patches, remote kill-switches for known-bad models, and stern emails about unsupported gateways are becoming normal. So is customer pushback: people dislike reboots mid-stream, and they dislike being told their bargain router from 2017 is a liability.
- Change the admin password even if the sticker feels “fine.”
- Turn on auto-update when the ISP or vendor offers it.
- Replace gear that no longer receives security fixes — nostalgia is not a control.
- Segment IoT devices away from the laptop you use for banking.
National-scale botnet cleanups start in hall cupboards. That is unromantic and, unfortunately, accurate.
Seen up close, the pattern is less about breakthrough theatre and more about quieter competence: fewer surprises, clearer owners, and tools that survive contact with Tuesday afternoon.
If your ISP offers a managed gateway with automatic updates, the boring choice is usually the safer one. Custom flashing is a hobby. Patching is a chore — and chores keep houses quieter.