Home Networks & Wi-Fi · Inside Your Router · Lesson 2 of 5

Firmware Updates

Why router updates matter, how to turn them on, and what end of life means.

What firmware does

Firmware is the software built into a device. It runs your router, a bit like Windows runs your computer. You never see it start. It just works in the background, day and night.

Like any software, firmware has mistakes. Some mistakes are small bugs. Others are security holes, also called vulnerabilities. A security hole is a flaw that an attacker can use to get into the device.

When the maker finds a hole, it releases a firmware update. An update is a new version that fixes problems. Updates can also make the router faster or add features.

Many newer routers can update themselves. In the router's app or admin page, look for a setting like "Automatic updates" or "Auto firmware update". Turn it on. These updates often install late at night, when nobody is using the internet.

If your router has no automatic option, check by hand every few months. Look for "Firmware update", "Router update" or "Check for updates". It is often under Administration or System.

A few safety tips:

• Only update from the router's own app or admin page, or the maker's official website.
• Don't unplug the router while it updates. Cutting the power partway can damage it.
• Expect the internet to drop for a few minutes while the router restarts.

If your internet company rents you the router, it usually sends the updates for you. You don't have to do anything.

Why old routers get hijacked

Routers are always on and always connected to the internet. That makes them a favorite target.

Attackers run programs that scan the internet all day. They look for routers with known security holes. They are not picking you. They are looking for anything weak.

When they find one, they can quietly install malware, which is harmful software. The router may then join a botnet. A botnet is a large group of hacked devices that a criminal controls from far away. Criminals use botnets to attack websites, send spam, or hide their own internet traffic by sending it through your connection.

You may not notice anything. The internet might feel a bit slow. But crimes could look like they came from your home.

This really happens. In May 2025, the FBI warned that criminals were taking over old routers that no longer got updates. They used malware called TheMoon and sold use of the hacked routers to other criminals. The FBI's advice was to replace those routers, turn off remote management, and use strong passwords.

Those routers had reached end of life. That means the maker has stopped supporting the model. There will be no more firmware updates, ever. Any new hole stays open for good.

How can you tell? Look up your model number on the maker's website. It may say "end of life", "end of support" or "no longer supported". Some admin pages show a warning too.

Restarting a router can clear some malware for a while. But if the hole is still open, it can come right back. Updating, or replacing an end of life router, is the real fix.