DevSecOpsLinks

We're glad to share with you the latest projects we've been working on recently!

ℹ️ Our YouTube channel:
We have never been active on Youtube before, but we're now experimenting with a concept of a weekly short video series that we called "5 Minutes FAUN". We're trying to share as much useful information as possible in a short video. The idea is to be efficient and to the point in each video.

So far, we published around 20 short videos. You can find them here .

These are some series we started so far, more are coming soon:
👉 5 Minutes Golang
👉 5 Minutes Python
👉 5 Minutes DevOps
👉 5 Minutes CloudNative
👉 5 Minutes AI
👉 5 Minutes Kubernetes
👉 5 Minutes Programming
👉 5 Minutes AWS

In less than 2 weeks, we've got:
⭐ 30,000 views
⭐ 500 watch hours
⭐ 200 new subscribers

Some of the most popular videos are:
🔗 Why is Kubernetes Written in Go ?!
🔗 The Real Reason why Go is not so Popular
🔗 Highest Paying Programming Languages
🔗 YAML = Your Abstraction Master Language
🔗 and others!

That's a great start! We're looking forward to growing our Youtube channel and sharing more useful information with you.

Please subscribe to the channel . If there are any topics you'd like us to cover, simply reply to this email or leave a comment on the Youtube channel. We'll do our best to cover them in future videos.


ℹ️ Our Youtube live music stream:
We're also experimenting with a new concept of a live music stream. This month, we launched a new Lo-Fi music live stream on Youtube . Many people listen to this genre of music while coding, so we thought it would be a good idea to create a live stream for our developer community. We're adding new songs to the stream every week.

You can find the stream here .

Are there other music genres you'd like us to stream? Let us know by replying to this tweet .

We're looking forward to growing this stream and sharing more music with you. Please subscribe to the channel. If there are any topics you'd like us to cover, simply reply to this email or leave a comment on the Youtube channel. We'll do our best to cover them in future videos.


ℹ️ FAUN community subreddits:
In addition to the old subreddit /r/DevOpsLinks, we launched multiple others. These subreddits are a place for FAUNers who are also Redditors to share links and start discussions. This is the complete list of the subreddits we have today:

👉 DevOps : /r/DevOpsLinks
👉 CloudNative : /r/CloudNativeLinks
👉 DevSecOps : /r/DevSecOpsLinks
👉 Golang : /r/GolangLinks
👉 Monitoring/Observability : /r/MonitoringLinks
👉 Programming : /r/ProgrammingLinks
👉 Python : /r/PythonLinks
👉 AI/ML : /r/AILinks
👉 Kubernetes : /r/KubernetesLinks

Don't forget to join your favorite subreddits! Let's make them a place to share and discuss the latest news and trends in the DevOps, CloudNative, DevSecOps, Golang, Monitoring, Programming, Python, AI, and Kubernetes ecosystems.

More subreddits are coming soon!

ℹ️ Our coming soon FAUN Topics (Weekly Newsletter):
As you may know, we're working on new weekly FAUN Topics:

👉 Kala: AI Weekly Newsletter.
👉 Secra: Security Weekly Newsletter.

If you'd like to subscribe to these newsletters, head over to FAUN website, click on the top menu, then " Newsletters settings ". You can subscribe to any newsletter you like. You can also unsubscribe from any newsletter you no longer want to receive using the same page.

ℹ️ How to support FAUN?
If you'd like to support FAUN and future projects, you can subscribe or donate here .

Alternatively, follow us on our social media channels, subscribe to our Youtube channel, and share our content with your friends or share your feedback with us by replying to one of our weekly newsletters.

DevSecOps brings development, security and operations teams together to build better processes and products. However, adopting DevSecOps isn’t a simple, single step; it requires new partnerships and processes backed by the full commitment of stakeholders.

16 members of Forbes Technology Council share common reasons why DevSecOps efforts fail and how these missteps can be avoided.

Logs are a key pillar of observability for many reasons, such as how they are stuffed full of details. Yet searching logs for indications of compromise (IOCs) is not an easy job.

One project to help security teams identify suspicious or even malicious activity is the open source Sigma project.

SigmaHQ created a pySigma Grafana Loki backend, which can take the Sigma rules you are interested in searching for and produce a Log

From Google's new report on supply chain security vulnerabilities, CISO Phil Venables offers five tips on how Google Cloud can help secure your software.

These recommendations can enable customers to benefit from Google’s extensive security experience and reduce their need to develop, maintain, and operate complex processes to secure their open source dependencies .

Google also strongly recommends you evaluate how you distribute software and the terms of software licenses in all of your dependencies.

PyTorch, an open-source machine learning framework, has seemingly been the target of a supply chain attack.

A problematic package with the same name was uploaded to the Python Package Index (PyPI) repository over the holidays. An investigation by PyTorch determined that the malicious "torchtriton" package sent system data from a user's computer to a recent domain.

The owner of the malicious package and the domain where user data was being sent defended their actions as being ethical research and apologized.

Phylum analyzes open-source packages’ source code and metadata as they are published into several popular ecosystems.

This year, they analyzed 627M source files across 11M package publications. Phylum reported on three large-scale campaigns targeting NPM and PyPI, with many smaller campaigns occurring during the last six months.

Developers are the new high-value targets, and attackers are exploiting this friction to gain an advantage in targeting developers directly. The battle between security teams wanting more visibility and developers wanting to code without interruptions has caused noticeable friction between these two teams.

With just one click, admins in GitHub Advanced Security organizations can protect their custom patterns on push.

A high-severity security vulnerability in the Kyverno admission controller for container images could allow malicious actors to import a raft of nefarious code into cloud production environments.

FAUN's Job Board offers an exceptional platform to connect with skilled developers, DevOps professionals, and software engineers who are eager to contribute to the success of your organization.

Post your job openings on FAUN's Job Board today and watch your talent pool grow.

Get started now .

👉 If you're a Developer or a maintainer of a widely adopted Open Source project and you think it's worth talking about it and your experiences in building it, join Humans Behind Code and get interviewed and published on faun.dev!

Meet developers where they are, not where you want them to be. Fill out the form and download our mediakit .

Learning how to interact and automate with Linux is essential for millions of professionals. Python makes it much easier. With this book, you'll learn how to develop software and solve problems using containers, as well as how to monitor, instrument, load-test, and operationalize your software. Looking for effective ways to "get stuff done" in Python? This is your guide.

• Python foundations, including a brief introduction to the language
• How to automate text, write command-line tools, and automate the filesystem
• Linux utilities, package management, build systems, monitoring and instrumentation, and automated testing
• Cloud computing, infrastructure as code, Kubernetes, and serverless
• Machine learning operations and data engineering from a DevOps perspective
• Building, deploying, and operationalizing a machine learning project

Azure Security Assessment Tool with Rust Language

This repository contains a curated list of resources I suggest on LinkedIn and Twitter

CLI tool for directly patching container images using reports from vulnerability scanners

Kubernetes pentesting, hardening and hunting tools.

ENIAC (Electronic Numerical Integrator and Computer) was the first programmable, electronic, general-purpose digital computer, completed in 1945.