Asus routers and Zoom Workplace get high-severity security patches

Major tech vendors Asus and Zoom have released security patches this week, addressing several high-severity vulnerabilities. Asus patched four flaws in certain router firmware that could let attackers run commands as the system's root user or crash devices by overwriting memory. Zoom fixed two privilege escalation bugs in its Workplace software for Windows, including a critical-rated vulnerability that could be exploited by unauthenticated remote attackers. For engineers and users, this means promptly applying the updates is essential. While there's no evidence of active exploitation yet, the high severity of the Zoom flaw and the elevated privileges possible on Asus routers make them attractive targets for attackers. The takeaway is a routine but important reminder: patch your devices and software, especially when vendors issue fixes for vulnerabilities that could give attackers full control.

What to do: Update Zoom Workplace for Windows to version 7.1.8 or later and apply the latest router firmware updates from Asus.