CISA Warns of Exploited Flaw in Asus Update Tool

Back Feeds.Feedburner

CISA Warns of Exploited Flaw in Asus Update Tool

Feeds.Feedburner •Ionut Arghire • December 18, 2025

Share: View original

Tracked as CVE-2025-59374, the issue is a software backdoor implanted in Asus Live Update in a supply chain attack.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Alerts on Exploited Backdoor in Asus Live Update Tool CISA has identified a critical vulnerability, tracked as CVE-2025-59374, in the Asus Live Update tool, which has been exploited as part of a supply chain attack. This flaw allows unauthorized access to systems using the affected software, posing risks to users of Asus products. 5 sources 29

Extracted Entities

Attack Types (1)

Supply Chain Attack

Companies (1)

CVEs (1)

Platforms (2)

Asus Live Update Asus Update Tool