CISA warns ASUS Live Update backdoor is still exploitable, seven years on

**ASUS Live Update (CVE-2025-59374) added to CISA KEV:** CISA added a CVSS 9.3 vulnerability in ASUS Live Update to its Known Exploited Vulnerabilities catalog, noting active exploitation; the report recalls a prior 2018 supply-chain compromise—attributed to state-sponsored APTs—that inserted a backdoor into the utility, and provides user remediation steps (update to 3.6.8 or later or reinstall from official ASUS product pages).