Dec 192025 CISA Flags Critical ASUS Live Update Flaw After Evidence of Active Exploitation CISA adds a critical ASUS Live Update vulnerability to its KEV list, citing active exploitation linked to a past supply chain attack.