CISA added a critical Asus Live Update supply‑chain compromise (CVE‑2025‑59374) to KEV, tied to tampered installers distributed before 2021 The flaw stems from the 2018–2019 incident, where attackers ...

Software security firm Kaspersky Lab announced on Monday that Asus computer users were targeted last year with malware via Asus' update utility in a so-called "supply-chain attack." The attackers were ...

The attack appears to be associated with a China-backed APT actor. A supply-chain attack dubbed “Operation ShadowHammer” has been uncovered, targeting users of the ASUS Live Update Utility with a ...

A new malware family is targeting Windows users by impersonating an ASUS utility to deliver malicious code – but perhaps most concerningly, it uses multiple techniques to hide itself from the best ...