CISA Adds ASUS Embedded Malicious Code Vulnerability to KEV List Following Active Exploitation

Cybersecuritynews •Abinaya • December 18, 2025

CISA has added a new ASUS vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, signaling urgent risk for affected users and organizations. The flaw, tracked as CVE-2025-59374, affects ASUS Live Update, a utility commonly used to deliver firmware and software updates to ASUS devices. According to the advisory, specific ASUS Live Update clients were distributed with embedded malicious […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Adds ASUS CVE-2025-59374 to KEV List Due to Active Exploitation CISA has included a new vulnerability affecting ASUS Live Update in its Known Exploited Vulnerabilities catalog. The flaw, identified as CVE-2025-59374, poses an urgent risk to users of specific ASUS Live Update clients that were distributed with embedded malicious code. Organizations using these affected clients are advised to take immediate action. 2 sources 32

Extracted Entities

CISA Adds ASUS Embedded Malicious Code Vulnerability to KEV List Following Active Exploitation

The full story

Extracted Entities

Companies (2)

CVEs (1)

Platforms (1)