About this episode

The episode discusses the Axios supply chain attack and its implications for cybersecurity and geopolitics.

The Axios supply chain attack proves attackers don’t need vulnerabilities if they can hit the assembly line. By compromising a single npm maintainer account, they were able to slip a trojan into Axios updates that executed automatically inside developer machines and CI/CD pipelines long before security tools could intervene. On this episode of State of Cybercrime, Matt and David examine how the Axios incident marks a shift toward supply chain abuse and what Google’s attribution to a North Korean-linked group reveals about the blurred lines between developer infrastructure, cybercrime, and geopolitics.

People in this episode

Hosts: Matt Radolec, David Gibson

Topics covered

• supply chain attack
• cybersecurity
• npm
• trojan
• geopolitics
• developer infrastructure

Keywords

• Axios
• supply chain attack
• npm maintainer
• trojan
• cybercrime
• Google
• North Korea

Mentioned in this episode

Organizations: Axios, Google

Places: North Korea

Explore listener stats, chart rankings, contacts and more on the State of Cybercrime podcast page.