They Got Trivy. They Got Axios. Now Theyre Coming For The Linux Foundation. Quinn Hughes [luP5l8Xf6ti]

Three attacks. Six weeks. None of them required finding a single vulnerability in any code.

In March and April 2026, open source infrastructure was hit by a wave of sophisticated supply chain attacks -- and the common thread wasn't bad code. It was trust. Attackers impersonated trusted figures, built fake companies with convincing Slack workspaces, joel dommett wife and used legitimate Google infrastructure to deliver malware. The tools people use to stay secure became the weapons used against them.

This video covers what ncaa lacrosse bracket happened with Trivy, Axios, and the Linux Foundation -- and what it means for your homelab.

Watch the previous video first:

CHAPTERS

00:00 - The Trust Problem Just Got Worse

01:07 - Trivy: Your Security Scanner Became the Weapon

01:57 - Axios: North Korea Hacked the kansas Person, Not the Code

03:03 - A Personal Note

03:27 - The Linux Foundation Attack

03:53 - What Is the Linux Foundation?

04:52 - How the Attack Worked

07:48 - The Thread Connecting All Three

08:37 - What This Means for Your Homelab

10:07 - Red Flags to Watch For

11:36 - Closing Thoughts

LINKS & SOURCES

Trivy Attack

The Register -- Two attackers poisoned open source tools:

Aqua Security -- Trivy attack investigation:

CrowdStrike -- From Scanner to Stealer:

Palo Alto Networks -- Trivy breakdown:

Microsoft Security Blog -- Trivy guidance:

Legit Security -- Trivy playbook:

Axios Attack

The Hacker News -- Axios maintainer confirms social engineering:

Google Cloud Blog -- North Korea Axios attribution:

Techzine -- North Korea behind Axios attack:

Help Net Security -- Axios North Korean hackers:

Cybersecurity News -- Axios maintainer confirms compromise:

Linux Foundation Attack

The Register -- Fake Linux Foundation leader phishing:

Socket.dev -- Linux Foundation impersonation:

OpenSSF Siren advisory:

Help Net Security -- Social engineering attacks escalating:

Cybersecurity News -- Linux Foundation attack breakdown:

- The time I got hacked:

Previous Video

Before You Trust Another Self-Hosted App, Watch This:

DB TECH

Website:

Patreon:

Channel Membership:

#selfhosted #homelab #opensource #linux #cybersecurity #supplychain #northkorea #docker #proxmox #selfhosting

Subtitles by WinWhisper

/=========================================/

Amazon Wishlist:

Get early, ad-free access to new content by becoming a channel member, or a Patron!

All My Social Links:

Join Discord!

/=========================================/

Ways to support DB Tech:

Cashapp:

Venmo:

Come chat in Discord: