An ASUS Live Update vulnerability, tracked as CVE-2025-59374, has been widely discussed in infosec feeds. Some headlines suggested recent or ongoing exploitation of this flaw. However, a closer examination reveals that the CVE documents a historic supply-chain attack. This attack targeted an End-of-Life (EoL) software product, indicating it is not a new threat.
An ASUS Live Update vulnerability, tracked as CVE-2025-59374, has been widely discussed in infosec feeds. Some headlines suggested recent or ongoing exploitation of this flaw. However, a closer examination reveals that the CVE documents a historic supply-chain attack. This attack targeted an End-of-Life (EoL) software product, indicating it is not a new threat.