News

• Asus released a patch for CVE-2025-3464, a high-severity authentication bypass flaw
• The issue affects Armoury Crate, a centralized hub for managing ASUS and ROG hardware
• The flaw could possibly lead to full device takeover

Asus says it has fixed a high-severity vulnerability that could have allowed threat actors to bypass authentication requirements and obtain SYSTEM privileges on a Windows device.

Recently, a security researcher from Cisco Talos discovered an Armoury Crate kernel-mode driver doesn’t rely on proper OS-level checks, but instead authenticates requests using a hardcoded SHA-256 hash of AsusCertServices.exe and a PID allowlist.

This means that a threat actor can create a hard link from a benign executable to a placeholder file, launch the app, and then swap the link to point to the trusted Asus binary. When the driver verifies the hash, it will recognize a trusted signature, even though the attacker’s process is now using that context.

The end result is unauthorized driver access, which could lead to full device compromise. The good news is that in order to abuse this vulnerability, the threat actor must obtain system access beforehand (either through stolen/purchased credentials, or a backdoor).

The vulnerability was found in Armoury Crate, an Asus application commonly pre-installed on ROG and TUF laptops and desktops.

It serves as a centralized hub for managing Asus and ROG hardware, including RGB lighting, fan curves, and the performance of different peripherals - and can also be used to manage driver and firmware updates.

The issue is now tracked as CVE-2025-3464, and has a severity score of 8.4/10 (high), as per NVD.

All versions between 5.9.9.0 and 6.1.18.0 were said to be vulnerable, and to secure their devices, users should update to the newest version of Armoury Crate: That can be done by navigating to Settings > Update Center > Check for Updates > Update.

Asus said it found no evidence that the flaw is being abused in the wild, but still “strongly recommends” users update their installations as soon as possible.

Via BleepingComputer

• Having problems with your Asus ROG Ally? A new patch for Armoury Crate might have fixed some issues... but not all of them
• Take a look at our guide to the best authenticator app
• We've rounded up the best password managers

• Keyview 13" Touch is a mechanical keyboard with a built-in 13-inch touchscreen
• It works with phones, tablets, laptops, desktops, and even game consoles
• There’s no battery or touchpad unfortunately, so you'll need to provide power and a mouse

The Keyview 13" Touch, from Aura Displays, is a compact 82-key mechanical keyboard (83 keys for the UK version) with a fun, and useful twist - it has an integrated 13-inch touchscreen attached.

This isn’t the first product of its kind we’ve seen - we’ve previously covered the Maxfree K3 and the Thanko mechanical keyboard with a 10-inch monitor, both of which offer the same blend of keyboard and display in one unit.

We’ve also encountered various DIY projects that produced laptops without displays, as well as notebook docking stations with built-in screens, but few of those have been as polished or feature-packed as this.

The Keyview 13" Touch's screen folds from 0 to 90 degrees and delivers a 1920 x 720 matte IPS display. It supports full 10-point multitouch and has a wide 178° viewing angle, making it usable for video, docs, or just as a second screen.

The keyboard itself uses yellow mechanical switches and PBT keycaps. It’s fully customizable, with hot-swappable keys, RGB lighting, and support for custom shortcuts.

The device includes USB-C, HDMI, two USB 3.0 ports, an SD/TF slot, and an M2 SSD bay for internal storage expansion. It also supports 60W PD fast charging.

It’s compatible with macOS, Windows, Android, Linux, and ChromeOS. That means it works with laptops, desktops, full-featured USB-C phones like the Galaxy line, latest iPhones, tablets, and even game consoles.

The case is made from aluminum alloy, ABS, and PC plastic. It’s solid but weighs 2.12kg, which makes it more of a backpack item than something pocketable.

There’s also a built-in speaker, rated at 1W. That's nothing special, but it will be fine for notifications or quick audio tasks.

There are a couple of bigger drawbacks, though - there’s no battery for starters, so you’ll need to plug it in every time you want to use it. And there’s no touchpad either, so unless your device is touch-capable, you’ll want to bring a mouse too.

Still, for a certain type of user, especially those wanting to turn their phone into a capable workstation, it’s an unusual and potentially useful option. You can buy it direct from Aura now for $399.00, 20% off its usual MSRP of $499.

• Check out our list of the best mobile workstations for any budget
• And these are the best mini PCs you can buy right now
• Minisforum's NAS packs a Ryzen AI HX 370, up to 96GB RAM and 154TB storage

• World Leaks adds Freedman HealthCare to its data leak site
• The group claims to have exfiltrated tens of thousands of files
• The company is staying silent for now

A cybercrime gang claims to have breached Freedman HealthCare, a US-based consulting firm which helps states and healthcare organizations handle data, and allegedly stole thousands of sensitive files.

A threat actor called World Leaks added Freedman HealthCare to its data leak website. The group is a new entrant in the cybercrime space, with some saying it’s a rebrand of Hunters International, while others report it’s a spin-off of the infamous organization.

In any case, the group added the consulting firm to its site, but hasn’t yet uploaded any files, most likely to try and pressure it into paying the ransom demand.

The attackers claim to have stolen 42,204 files, amounting to more than 50GB, but the nature of the stolen files isn’t known, nor is the amount of money requested.

The company handles personal health information of millions of Americans, including sensitive data processed in Medicaid and commercial insurance claims, state health and human services agencies, social determinants of health datasets, and healthcare workforce initiatives.

Freedman HealthCare has not yet addressed these claims, so we don’t even know if they’re legitimate, or not.

However, Hunters International has a relatively good track record, with notable past victims including Toyota Brazil, NanoLumens, Integrated Control, and Frederick Wildman and Sons.

World Leaks apparently operates on an “extortion-as-a-service” model, launched in early 2025. The Register notes Hunters International found their ransomware work too risky, especially with international law enforcement operations actively targeting these groups. This prompted them to switch from the usual double extortion tactics to extortion as a service, resulting in the creation of World Leaks.

The group appears to be Russian in origin, and is rather active, with more than 150 victims in the last year.

• Hacked Tata Technologies data leaked by ransomware gang
• Take a look at our guide to the best authenticator app
• We've rounded up the best password managers