---
title: "Security digest: March 25, 2019"
url: https://erroneo.us/security/2019-03-25/
description: "March 25, 2019 vulnerability digest: 1 brief (ShadowHammer). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2019-03-25
date_modified: 2026-10-23
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: March 25, 2019

1 editorial brief.

## Take stock

- Most can relax: ShadowHammer . Anyone who still has ASUS Live Update on old ASUS laptops (remove it), and organizations whose ASUS laptops ran it between June and November 2018 and never checked for ShadowHammer targeting.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Most can relax** [ASUS Live Update CVE-2025-59374: ShadowHammer Backdoor](https://erroneo.us/security/briefs/asus-live-update-shadowhammer-cve-2025-59374/index.md): This is a 2025 CVE label for a 2018 supply-chain attack aimed at about 600 machines and fixed in 2019; uninstall ASUS Live Update if it is still around, but there is no public report of new exploitation.

## Known exploited (CISA KEV)

None.

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2019-03-25/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt