CISA Warns of Exploited Flaw in Asus Update Tool

Back Securityweek

CISA Warns of Exploited Flaw in Asus Update Tool

Securityweek • December 18, 2025

Share: View original

The US cybersecurity agency CISA on Wednesday warned that hackers have been exploiting a critical vulnerability in the now-discontinued Asus Live ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Alerts on Exploited Backdoor in Asus Live Update Tool CISA has identified a critical vulnerability, tracked as CVE-2025-59374, in the Asus Live Update tool, which has been exploited as part of a supply chain attack. This flaw allows unauthorized access to systems using the affected software, posing risks to users of Asus products. 5 sources 29

Extracted Entities

Companies (1)

Platforms (1)

Asus Live Update Tool