Not all CISA-linked alerts are urgent: ASUS Live Update CVE-2025-59374
ID: 85a144a3-e3f0-52bf-8ca3-efb52cf8b9fd
STIX ID: report--85a144a3-e3f0-52bf-8ca3-efb52cf8b9fd
Feed Name: Bleeping Computer
Threat Score
The article explains that CVE-2025-59374 documents the historical 2018–2019 ShadowHammer supply-chain compromise of ASUS Live Update and that its addition to CISA's KEV catalog appears to be a retrospective classification for an End-of-Life product rather than evidence of active, new exploitation; it advises ensuring systems are not running the unsupported utility and to follow existing remediation guidance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.