This page will constantly update with news from the world about the topic of eliminating default passwords.
Newest content will be on top.
3-March-2026 – Home Routers in Singapore Must Meet Higher Security Standards by 2027
Singapore is preparing to tighten its mandatory cybersecurity requirements for residential routers, with the Cyber Security Agency of Singapore (CSA) and the Infocomm Media Development Authority (IMDA) set to raise standards under the Cybersecurity Labelling Scheme (CLS). The move, announced during the Ministry of Digital Development and Information (MDDI) Committee of Supply Debates 2026, will require all locally sold residential routers to meet CLS Level 2 standards by the end of 2027
…
As of mid-February 2026, 870 products had attained the CLS label. Currently, all residential routers sold in Singapore must comply with CLS Level 1 standards. These Level 1 mandatory cybersecurity requirements include unique default passwords, established vulnerability management processes, and regular software updates
11-June-2025 – SinoTrack GPS Devices Vulnerable to Remote Vehicle Control via Default Passwords
3-June-2025 – Smart Cars, Dumb Passwords: Auto Industry Still Runs on Weak Passwords
3-October-2024 – A new survey reveals 86% of broadband users haven’t changed their router’s default admin password
15-December-2023 – CISA urges vendors to get rid of default passwords Cybersecurity officials also issued new guidance on open source software through secure-by-design practices
15-December-2023 (PDF file) – CISA – Secure by Design Alert – “How Manufacturers Can Protect Customers by Eliminating Default Passwords”
31-August-2023 – LogicMonitor customers hit by hackers, because of default passwords
17-April-2023 – 7 countries unite to push for secure-by-design development Agencies from across seven countries come together to create a guidance that aims to remove the burden of security from the technology buyer
07-October-2016 – CISA – Risks of Default Passwords on the Internet