erroneo.us
Search all guides⌘K

Digest · Monday

Security digest: March 25, 2019

1 editorial brief.

All digests · RSS · Markdown

Take stock

  • Most can relax: ShadowHammer. Anyone who still has ASUS Live Update on old ASUS laptops (remove it), and organizations whose ASUS laptops ran it between June and November 2018 and never checked for ShadowHammer targeting.
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Most can relax

· Supply-chain compromise · CVE-2025-59374

ASUS Live Update CVE-2025-59374: ShadowHammer Backdoor

This is a 2025 CVE label for a 2018 supply-chain attack aimed at about 600 machines and fixed in 2019; uninstall ASUS Live Update if it is still around, but there is no public report of new exploitation.

Must act: Anyone who still has ASUS Live Update on old ASUS laptops (remove it), and organizations whose ASUS laptops ran it between June and November 2018 and never checked for ShadowHammer targeting.

Can relax: Owners of newer ASUS devices that ship MyASUS instead of Live Update, anyone already on Live Update 3.6.8 or later, and everyone who never ran the tool in 2018.

  1. Find ASUS Live Update on Windows endpoints and record the version.
  2. Uninstall it; ASUS says Live Update is end-of-support and newer models use MyASUS instead.
  3. If it must stay for now, confirm it is version 3.6.8 or later.

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 0

GitHub-reviewed advisories rated critical, published this day (Pacific time).

None.