Skip to main content
Apexward Pulse
3 reportsPriority Medium

ASUS Live Update and Trivy malicious code vulnerabilities

Two separate vulnerabilities have been reported in software used by UK organisations, potentially allowing attackers to gain access to sensitive systems and data.

First report Latest

What is going on

  • A vulnerability was reported in ASUS Live Update software that could allow attackers to execute unauthorised code on affected systems.
  • A separate vulnerability was reported in Aquasecurity Trivy software that could enable attackers to access CI/CD environments and their associated credentials.
  • Both vulnerabilities are linked to embedded malicious code, with the ASUS issue involving a supply chain compromise and the Trivy issue potentially exposing sensitive data in development environments.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed