security1 distinct publisher
CISA names two poisoned axios releases, and the bill lands on whoever owns the CI secrets
A federal alert pins axios 1.14.1 and 0.30.4 as the compromised builds. The remediation is a one-patch downgrade and a credential rotation sized by what your pipelines were carrying.
Publishers:cisa.gov
Reality
- Evidence78
- Adoption
- Insufficient
- Hype gap0
- Incentives20
- Confidence68