InfoSecBulletin Cybersecurity for mankind
Hackers can exploit a vulnerability in Asus routers to execute unauthorized functions. This serious issue, rated 9.2 out of 10, has prompted the company to advise users to update the firmware of Asus routers that use AiCloud.
Asus AiCloud is a cloud storage and remote access service for ASUS routers, popular in the US, especially among gamers and tech enthusiasts.
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
“An improper authentication control vulnerability exists in certain ASUS router firmware series. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions,” Asus warns in a security advisory.
A new firmware update is available for the 3.0.0.4_382, 3.0.0.4_386, 3.0.0.4_388, and 3.0.0.6_102 series.
CVE-2025-2492 is a vulnerability in the vendor’s latest networking devices. It’s uncertain if it is currently being exploited by threat actors.
“Update your router with the newest firmware,” Asus added.
The newest firmware can be found on the Asus support or relevant product pages.
Asus advises users unable to quickly update firmware or with end-of-life devices to disable AiCloud and other internet-accessible services, including remote WAN access, port forwarding, DDNS, VPN server, DMZ, port triggering, and FTP.
Asus also recommends using different passwords for the wireless network and router administration page.
“Use passwords that are at least 10 characters long and contain a mix of capital letters, numbers, and symbols. Do not use the same password for more than one device or service. Do not use passwords with consecutive numbers or letters, such as 1234567890, abcdefghij, or qwertyuiop,” Asus’s advisory reads.
