InfoSecBulletin Cybersecurity for mankind
Hackers can exploit a vulnerability in Asus routers to execute unauthorized functions. This serious issue, rated 9.2 out of 10, has prompted the company to advise users to update the firmware of Asus routers that use AiCloud.
Asus AiCloud is a cloud storage and remote access service for ASUS routers, popular in the US, especially among gamers and tech enthusiasts.
YouTube geo-blocks at least 4 Bangladeshi TV channels in India
Microsoft Patches Four Critical Azure and Power Apps Vulns
Qilin Ransomware topped April 2025 with 45+ data leak disclosures
SonicWall Patches 3 Flaws in SMA 100 Devices
Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed
Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA
CVE-2025-29824
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day
Hacker exploited Samsung MagicINFO 9 Server RCE flaw
CISA adds Langflow flaw to its KEV catalog
Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers
“An improper authentication control vulnerability exists in certain ASUS router firmware series. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions,” Asus warns in a security advisory.
A new firmware update is available for the 3.0.0.4_382, 3.0.0.4_386, 3.0.0.4_388, and 3.0.0.6_102 series.
CVE-2025-2492 is a vulnerability in the vendor’s latest networking devices. It’s uncertain if it is currently being exploited by threat actors.
“Update your router with the newest firmware,” Asus added.
The newest firmware can be found on the Asus support or relevant product pages.
Asus advises users unable to quickly update firmware or with end-of-life devices to disable AiCloud and other internet-accessible services, including remote WAN access, port forwarding, DDNS, VPN server, DMZ, port triggering, and FTP.
Asus also recommends using different passwords for the wireless network and router administration page.
“Use passwords that are at least 10 characters long and contain a mix of capital letters, numbers, and symbols. Do not use the same password for more than one device or service. Do not use passwords with consecutive numbers or letters, such as 1234567890, abcdefghij, or qwertyuiop,” Asus’s advisory reads.
