CISA Flags Critical ASUS Live Update Flaw After Evidence of Active Exploitation

CISA Flags Critical ASUS Live Update Flaw After Evidence of Active Exploitation

/in

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting ASUS Live Update to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulnerability, tracked as CVE-2025-59374 (CVSS score: 9.3), has been described as an “embedded malicious code vulnerability” introduced by means of a supply chain compromise

The Hacker News – ​Read More

Cisco Warns of Active Attacks Exploiting Unpatched 0-Day in AsyncOS Email Security...Cisco Warns of Active Attacks Exploiting Unpatched 0-Day in AsyncOS Email Security AppliancesThe internet in 2025: Bigger, more fragile than ever – and ‘fundamentally...