Multiple vulnerabilities have been reported in dnsmasq, the service on the ZyXEL routers which provides a DNSresolver, DHCP functions and router advertisement for IPv6.
A list of these can be found here.

The scope of these is relatively broad, and most attack vectors are local. causing the router to fail DNS/DHCP/RA if exploited (DoS condition), one additional vector includes execution of arbitrary code.
As dnsmasq is tightly integrated into the router, it can't just be turned off, however as a workaround you can change the DNS servers the routers serves in it's DHCP server to minimise potential impact from a local attacker should they perform a DNS request in a way which exploits the DoS conditions. This can be performed by going to the Router Settings page on your control pages, and entering our nameservers 217.169.20.20 and 217.169.20.21 into the IPv4 DNS fields, clicking save, then clicking on the DHCP button at the bottom (for B10Ds only) or clicking on Send ZyXEL configuration (B10As or B10Ds, will wipe existing settings on the router)

An official patch from ZyXEL is estimated to be provided during December 2017 for the VMG1312-B10D routers (Firmware V5.13(AAXA.7)), and January 2018 for the the VMG1312-B10A routers.
An update will be made to this post once firmware updates have been released.

There are lots of news articles and discussions about the 'KRACK' attack vulnerability affecting WiFi client devices.

From an customer of AAISP point of view, we do sell DSL routers with WiFI as well as WiFi access points but, this is a vulnerability in WiFi clients rather than the routers themselves.

Generally, the fix for this vulnerability is on the client side - ie the computer or mobile device connecting to a WiFi network, and so customers should look for software updates for their devices and operating systems. There are links below regarding devices we are involved with which contain further information.

We'll add further information to this post as we receive it.

I am pleased to confirm we have now launched "Quota Bonus"

The concept is simple, and applies to Home::1 and SoHo::1 on all levels including terabyte.

You start your billing month with your quota as normal, but get an extra bonus that is half of the unused quota, if any, from the previous month.

This allows people to build up a reserve and allow for occasional higher months without needing top-up.

Thanks to all of the customers for the feedback on my blog posts on this. --Adrian.

P.S. yes, it is sort of cumulative, see examples on http://aa.net.uk/broadband-quota.html

We have a number of tariff changes planned, after a lot of interesting comments from my blog post - thank you all.

Some things are simple, and we are able to do sooner rather than later, like the extra 50GB already announced. Some will not be until mid to late October as they depend on other factors. Some may take longer still.

To try and ensure we get improvements as quickly as possible for customers I am updating a news item on our web site with details as we go.

http://aa.net.uk/news-2017-tariffs.html

As you will see, we are testing a change to make top-up on Home::1/SoHo::1 not expire. We have the end of a period (full moon) in two days where we can see if code changes work as expected on a live customer line. If all goes well then later this week we can change the description on the web site and officially launch this change.

Do check that page for updates and new features we are adding as we go.

We have changed the monthly quota allowances on Home::1 and SoHo::1 today, increasing all of the sub terabyte rates by 50GB per month, without changing prices.

I.e. you now get 200GB for the previous price of 150GB, and 300GB for the previous price of 250GB.

Existing customers have had this additional amount added to their September quota.

For the past few years we've been supplying the ZyXEL ZyXEL VMG1312-B10A router. This is being discontinued and we will start supplying its replacement, the ZyXEL VMG1312-B10D (note the subtle difference!)

The new router is smaller than the previous one and has a very similar feature set and web interface to the old one.

We are still working through our configuration process and are updating the Support site with documentation. We are hoping this model to resolve many of the niggles we have with the old one too.