The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting ASUS Live Update, tracked as CVE-2025-59374, to its Known Exploited Vulnerabilities (KEV) catalog due to evidence of active exploitation. This “embedded malicious code vulnerability,” rated with a CVSS score of 9.3, was introduced through a supply chain compromise. CISA’s action highlights the urgency for users to address this security threat promptly. Organizations are urged to implement necessary updates to mitigate risks associated with this flaw.
