• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

ASUS Becomes Member of "FIRST" Cybersecurity Organization

T0@st

News Editor
Joined
Mar 7, 2023
Messages
2,385 (3.37/day)
Location
South East, UK
In a world where most of us work, communicate, play, explore, and make purchases online nearly every day, cybersecurity is more important than ever. Yet it's also a world where it's increasingly hard to know who to trust. Perhaps you've seen recent news reports that call into question the security practices of companies that you might rely on for the network for your home or small business. At ASUS, we're working to show you that not every networking company has the same level of commitment to cybersecurity. Recently, we joined FIRST, a longstanding and renowned organization that brings together a variety of computer security incident response teams from around the world. Our membership in FIRST enables us to take enterprise-level experience, security protocols, and incident response tactics and integrate them into the consumer market.

35 years of coordinating responses against cyberattacks
When you're the victim of a cyberattack, your priority is to re-secure your own hardware, data, and account access. But the incident response teams dedicated to cybersecurity have to take a larger view. What vulnerability made the cyberattack possible? What other systems could be affected? How quickly can a fix be deployed, and how might this fix affect other vital systems and functions? Answering these questions in today's connected world requires not just on-the-ground incident response teams, but international communication and coordination between these groups. Since 1990, this layer of coordination has been provided by FIRST—the Forum of Incident Response and Security Teams. Consisting of members from government agencies, educational institutions, military divisions, and the private sector, FIRST works to ensure a safe internet for everyone by creating channels for incident response and security teams across the globe to work together.




Now, ASUS has joined FIRST—and our membership is a "first" in more ways than one. While networking companies including Cisco, Palo Alto, and Juniper have long been part of FIRST, reflecting their significant expertise and continued efforts in cybersecurity, it's been relatively rare for companies that build home networking products to join FIRST. Out of all the companies that sell networking hardware directly to consumers, ASUS is one of very few with membership in FIRST.

ASUS sets a new standard of excellence in the home networking industry
Joining FIRST isn't as simple as signing up for an email newsletter. To become a member of FIRST, organizations must undergo on-site evaluations and recommendations by two existing members, followed by review and approval by the FIRST Board of Directors. ASUS was recommended by DTTW-CSIRT (Deloitte Taiwan CSIRT) and TeamT5 CSIRT (TeamT5 Cyber Security Incident Response Team). After a rigorous assessment process, ASUS successfully joined FIRST, showcasing its exceptional capabilities in cybersecurity and earning international trust.

That level of effort and scrutiny perhaps explains why it's not more common for home networking companies to be active participants in FIRST. But since ASUS is more than just a home networking company, we have direct experience with the value that FIRST provides. As a supplier of enterprise-grade networking hardware—not to mention our portfolio of servers, laptops, PC components, displays, peripherals, ASUS NUCs, and much more—we had already put in significant investment into applying robust security standards to our product development, support, and supply chain practices, even before joining FIRST.

As a member of FIRST, ASUS can do even more to bolster every aspect of our cybersecurity practices. When you purchase ASUS networking hardware, you'll pull a more secure device out of the box. You'll have more transparency into emerging vulnerabilities. And your device will have even faster access to the latest security fixes.

What ASUS joining FIRST means for home users and small business owners
All this might seem disconnected from your everyday digital life. When you're streaming your favorite shows, playing Fortnite with your friends, meeting with coworkers through Microsoft Teams, or checking your bank account online, you're almost certainly paying more attention to the speed and reliability of your internet connection than you are with its security.

Yet the truth is that cyber threats are unfortunately common. Both corporations and households can be the targets of malicious activities, and unprotected routers are a prime entry point for attackers. That's why timely patching is critical. From zero-day exploits to ransomware, new types of threats can surface at any time. Quickly receiving the latest firmware updates and security advice is crucial to minimizing damage.



If maintaining a secure network can feel like a tall task for home users, it can feel especially burdensome for small business owners. A cyberattack can be devastating to the reputation of a small financial services office, for example, yet such businesses might not have the resources to keep dedicated network professionals on staff. Even business owners looking to do little more than run point-of-sale devices and provide a guest network to customers need to be mindful of network security to maintain customer satisfaction and limit liability.

Joining FIRST gives us quicker access to vital security information, which puts our company in a better position to extend real-time, transparent security protections to home users and small business alike. As a CVE Numbering Authority (CNA), we're able to assign CVE identifiers to newly discovered cybersecurity vulnerabilities. The CVE (Common Vulnerabilities and Exposures) system is a globally recognized method for identifying and tracking security vulnerabilities, enabling swift discussion and resolution in the cybersecurity community.

Here's what that means for you:
  • Accelerated Patch Deployment and Notifications. ASUS can promptly request CVE IDs and disclose information for vulnerabilities in its products. As a result, home and SMB router users receive firmware updates faster, reducing potential risks.
  • Improved Transparency. In the past, users might have been unaware of potential vulnerabilities in their routers or other devices. Now, with ASUS as a CNA, security risks and patch methods will be publicly announced via official bulletins, empowering users to protect themselves.
  • Comprehensive Protection. Home networks often include smart appliances and IoT devices—popular targets for cyberattacks. Official alerts and patch releases from ASUS help safeguard users against various threats, such as Wi-Fi exploits and phishing attacks.

Network security doesn't need to be top of mind as you're going about your daily browsing, work, and play. But it should be a high priority as you're selecting the hardware that powers your digital life. Through our longstanding commitment to cybersecurity and our membership in FIRST, we're able to give you more peace of mind as you build your network.

ASUS empowers you to build a network that's secure from the ground up
For too long, too many home networking companies have treated cybersecurity as a secondary concern to network speed and coverage, locking their most robust security packages behind paid subscriptions and letting others place the active roles in incidence response.



Now, that's changing. By joining FIRST and becoming a CNA, ASUS takes a significant stride onto the international cybersecurity stage, solidifying our security-first approach for both enterprise and consumer product lines. Through global threat intelligence sharing, CVE-based vulnerability management, and an efficient patching process, ASUS remains dedicated to bolstering comprehensive cybersecurity. This puts us in a position to help every user, from corporations to small businesses to private homes, defend themselves against a rapidly evolving digital threat landscape with a trusted, robust layer of protection.

Even before joining FIRST, ASUS set a high bar in the industry for network security. For years, we've offered robust, commercial-grade security to our users as a baseline, without requiring a subscription—and we've partnered with the most trusted names in the cybersecurity business to ensure automatic, timely updates that protect against the latest threats.



If you have concerns about the networking hardware that you're currently using, or if it's been a few years since you last upgraded your router, we recommend that you look at our latest solutions. Whether you're looking for whole-home coverage from a mesh router, a gaming-first router ready to boost your competitiveness in online battlefields, or a business-ready networking solution, we have hardware the provides the speed, range, and security that you need.

View at TechPowerUp Main Site | Source
 

Solaris17

Super Dainty Moderator
Staff member
Joined
Aug 16, 2005
Messages
27,249 (3.83/day)
Location
Alabama
System Name RogueOne
Processor Xeon W9-3495x
Motherboard ASUS w790E Sage SE
Cooling SilverStone XE360-4677
Memory 128gb Gskill Zeta R5 DDR5 RDIMMs
Video Card(s) MSI SUPRIM Liquid X 4090
Storage 1x 2TB WD SN850X | 2x 8TB GAMMIX S70
Display(s) 49" Philips Evnia OLED (49M2C8900)
Case Thermaltake Core P3 Pro Snow
Audio Device(s) Moondrop S8's on schitt Gunnr
Power Supply Seasonic Prime TX-1600
Mouse Razer Viper mini signature edition (mercury white)
Keyboard Monsgeek M3 Lavender, Moondrop Luna lights
VR HMD Quest 3
Software Windows 11 Pro Workstation
Benchmark Scores I dont have time for that.
cybersecurity is more important than ever.

Its true, which is why you will never see me trusting it to Asus or literally anything in there network stack. Not to mention from a non-home user standpoint there equipment is garbage.

 
Joined
Jul 31, 2024
Messages
801 (4.09/day)
In a world where most of us work, communicate, play, explore, and make purchases online nearly every day, cybersecurity is more important than ever.

...

For years, we've offered robust, commercial-grade security to our users as a baseline, without requiring a subscription—and we've partnered with the most trusted names in the cybersecurity business to ensure automatic, timely updates that protect against the latest threats.

Marketing ... without actions.

And that is the reason my ASUS X670-P Prime mainboard with announced security hole did not had an uefi update for weeks. It was an issue about the uefi which circumvented hole encryption and such.

ASUS segments the mainboards in mainboards which get fast UEFI security fixes and mainboards like the prime and sometimes the tuf series which gets much later uefi updates. Note: a ATX mainboard and laptop are network capable devices.

ASUS - if you read this - provide updates much faster for any given hardware. not only for around 3 years but much longer. At some time asus told me my asus gaming notebook was too old and did not get any updates anymore. I do not know If I have that email conversation anymore.

--

Asus armory crate is still enabled after an uefi update (note: topic is about ASUS products)
 
Joined
Jan 30, 2018
Messages
230 (0.09/day)
System Name Dreamstation2
Processor Ryzen 7 3700X
Motherboard MSI X470 Gaming Plus
Cooling Hyper 212 Black Edition
Memory Kingston HyperX 32GB DDR4 3200 CL16
Video Card(s) Aorus 2080 Ti Turbo (sounds like a vaccum cleaner at full load)
Storage 2 x 1TB M.2 NVME + 1TB 2.5" SSD
Display(s) Samsung Odyssey G7 32" 4k
Case NZXT H500i
Audio Device(s) Asus Xonar U3 / Audio-Technica ATH-M50x / Edifier R1855DB
Power Supply Corsair TX650M
Mouse Corsair Scimitar Pro RGB
Keyboard Cooler Master Masterkeys Lite L
How about removing the rootkit called "ASUS Armoury Crate" from the UEFI?
Then we can put "ASUS" and "security" in the same sentence.

Since the the 80486 days, Asus was my first choice for motherboards. Heck, in the company I worked for, there was one BSD/OS server with a (consumer grade) Asus mobo that run for 7 years without rebooting or switching off. My last Asus motherboard was an excellent ASUS P5Q Pro which died after 6 years of moderate use.
Starting around year 2008 (or a little bit later, not sure), quality and support started to go down, and prices up. Changed to Gigabyte and MSI and have been happy ever since.
 
Joined
Mar 7, 2011
Messages
4,781 (0.94/day)
Shitsus is the company that has a Zero Day in their motherboards now claims to be "1st" Cybersecurity what a joke.
 

freeagent

Moderator
Staff member
Joined
Sep 16, 2018
Messages
9,717 (4.15/day)
Location
Winnipeg, Canada
Processor AMD R7 5800X3D
Motherboard Asus Crosshair VIII Dark Hero
Cooling Thermalright Frozen Edge 360, 3x TL-B12 V2, 2x TL-B12 V1
Memory 2x8 G.Skill Trident Z Royal 3200C14, 2x8GB G.Skill Trident Z Black and White 3200 C14
Video Card(s) Zotac 4070 Ti Trinity OC
Storage WD SN850 1TB, SN850X 2TB, SN770 1TB
Display(s) LG 50UP7100
Case Fractal Torrent Compact
Audio Device(s) JBL Bar 700
Power Supply Seasonic Vertex GX-1000, Monster HDP1800
Mouse Logitech G502 Hero
Keyboard Logitech G213
VR HMD Oculus 3
Software Yes
Benchmark Scores Yes
It isn't hard to disable. It is easier than turning on rebar.
 
Joined
May 13, 2010
Messages
6,117 (1.14/day)
System Name RemixedBeast-NX
Processor Intel Xeon E5-2690 @ 2.9Ghz (8C/16T)
Motherboard Dell Inc. 08HPGT (CPU 1)
Cooling Dell Standard
Memory 24GB ECC
Video Card(s) Gigabyte Nvidia RTX2060 6GB
Storage 2TB Samsung 860 EVO SSD//2TB WD Black HDD
Display(s) Samsung SyncMaster P2350 23in @ 1920x1080 + Dell E2013H 20 in @1600x900
Case Dell Precision T3600 Chassis
Audio Device(s) Beyerdynamic DT770 Pro 80 // Fiio E7 Amp/DAC
Power Supply 630w Dell T3600 PSU
Mouse Logitech G700s/G502
Keyboard Logitech K740
VR HMD Linktr.ee/remixedcat // for my music ♡♡
Software Linux Mint 20
Benchmark Scores Network: APs: Ubiquiti Unifi AP-AC-LR and Lite Router/Sw:Meraki MX64 MS220-8P
PALO ALTO is listed and they are 2nd to UNFortinet.... so many vulns they are swiss cheese.
 
Top