Happy Monday fellow Linux geeks and Open Source enthusiasts! In this week's newsletter, we cover a new large-scale phishing campaign that has flooded open-source repositories with 144,000 malicious packages. Learn about this attack, so you are better equipped to defend against it and future threats!

In addition, we explain how the Lynis Linux security audit tool can help admins audit their systems and generate reports, as well as other Lynis options available, including running custom tests and category tests.

Finally, we explain how your physical security strategy is essential to your cybersecurity healththe main methods of blending cyber and physical security and the critical role that open-source intelligence (OSINT) plays in facilitating the convergence of physical security and cybersecurity.

Hope you enjoy!

Yours in Open Source,

Brittany Signature 150

7.Locks HexConnectionsIn this article, we we explain how your physical security strategy is essential to your cybersecurity health, the main methods of blending cyber and physical security and the critical role that open-source intelligence (OSINT) plays in facilitating the convergence of physical security and cybersecurity.

Learn more about how physical security blends with cybersecurity

 

10.FingerPrint LocksIn this article, Zaid explains how Lynis can be installed and run to audit Linux systems and generate reports, as well as other Lynis options available, including running custom tests and category tests.

Learn more about lynis linux security audit tool

 

15.@Sign KeyboardResearchers have identified that a massive 144,294 phishing-related packages have been uploaded by unknown threat actors on widely used open-source package repositories including NPM, PyPi, and NuGet. Learn about this large-scale attack so you are better equipped to defend against it, as well as future threats.

Learn more about phishing campaign open source repositories