× Want to read this newsletter every week?! × 👋  Join FAUN
 
DevSecOps Weekly Newsletter, Zeno. Curated DevSecOps news, tutorials, tools and more!
🌐 View in your browser   |  ✍️ Publish on FAUN   |  🦄 Become a sponsor
 
Last week's must-read news and stories from the DevSecOps community
Zeno
 
 
🐾 Stories From FAUNers
 
faun.dev faun.dev
 
🐾🐾 What's new in FAUN - January 2023
 
 
We're glad to share with you the latest projects we've been working on recently!

ℹ️ Our YouTube channel:
We have never been active on Youtube before, but we're now experimenting with a concept of a weekly short video series that we called "5 Minutes FAUN". We're trying to share as much useful information as possible in a short video. The idea is to be efficient and to the point in each video.

So far, we published around 20 short videos. You can find them here .

These are some series we started so far, more are coming soon:
👉 5 Minutes Golang
👉 5 Minutes Python
👉 5 Minutes DevOps
👉 5 Minutes CloudNative
👉 5 Minutes AI
👉 5 Minutes Kubernetes
👉 5 Minutes Programming
👉 5 Minutes AWS

In less than 2 weeks, we've got:
⭐ 30,000 views
⭐ 500 watch hours
⭐ 200 new subscribers

Some of the most popular videos are:
🔗 Why is Kubernetes Written in Go ?!
🔗 The Real Reason why Go is not so Popular
🔗 Highest Paying Programming Languages
🔗 YAML = Your Abstraction Master Language
🔗 and others!

That's a great start! We're looking forward to growing our Youtube channel and sharing more useful information with you.

Please subscribe to the channel . If there are any topics you'd like us to cover, simply reply to this email or leave a comment on the Youtube channel. We'll do our best to cover them in future videos.


ℹ️ Our Youtube live music stream:
We're also experimenting with a new concept of a live music stream. This month, we launched a new Lo-Fi music live stream on Youtube . Many people listen to this genre of music while coding, so we thought it would be a good idea to create a live stream for our developer community. We're adding new songs to the stream every week.

You can find the stream here .

Are there other music genres you'd like us to stream? Let us know by replying to this tweet .

We're looking forward to growing this stream and sharing more music with you. Please subscribe to the channel. If there are any topics you'd like us to cover, simply reply to this email or leave a comment on the Youtube channel. We'll do our best to cover them in future videos.


ℹ️ FAUN community subreddits:
In addition to the old subreddit /r/DevOpsLinks, we launched multiple others. These subreddits are a place for FAUNers who are also Redditors to share links and start discussions. This is the complete list of the subreddits we have today:

👉 DevOps : /r/DevOpsLinks
👉 CloudNative : /r/CloudNativeLinks
👉 DevSecOps : /r/DevSecOpsLinks
👉 Golang : /r/GolangLinks
👉 Monitoring/Observability : /r/MonitoringLinks
👉 Programming : /r/ProgrammingLinks
👉 Python : /r/PythonLinks
👉 AI/ML : /r/AILinks
👉 Kubernetes : /r/KubernetesLinks

Don't forget to join your favorite subreddits! Let's make them a place to share and discuss the latest news and trends in the DevOps, CloudNative, DevSecOps, Golang, Monitoring, Programming, Python, AI, and Kubernetes ecosystems.

More subreddits are coming soon!

ℹ️ Our coming soon FAUN Topics (Weekly Newsletter):
As you may know, we're working on new weekly FAUN Topics:

👉 Kala: AI Weekly Newsletter.
👉 Secra: Security Weekly Newsletter.

If you'd like to subscribe to these newsletters, head over to FAUN website, click on the top menu, then " Newsletters settings ". You can subscribe to any newsletter you like. You can also unsubscribe from any newsletter you no longer want to receive using the same page.

ℹ️ How to support FAUN?
If you'd like to support FAUN and future projects, you can subscribe or donate here .

Alternatively, follow us on our social media channels, subscribe to our Youtube channel, and share our content with your friends or share your feedback with us by replying to one of our weekly newsletters.
 
 

👉 Create your FAUN Page if it's not done yet and start sharing your blog posts, news, and tools on FAUN Developer Community, collect badges and more!
 

 
🔗 Stories, Tutorials & Articles
 
www.forbes.com www.forbes.com
 
16 Reasons DevSecOps Efforts Fail (And How To Get Them Right)   ✅
 
 
DevSecOps brings development, security and operations teams together to build better processes and products. However, adopting DevSecOps isn’t a simple, single step; it requires new partnerships and processes backed by the full commitment of stakeholders.

16 members of Forbes Technology Council share common reasons why DevSecOps efforts fail and how these missteps can be avoided.
 
 
grafana.com grafana.com
 
A guide to cyber threat hunting with Promtail, Grafana Loki, Sigma, and Grafana Cloud
 
 
Logs are a key pillar of observability for many reasons, such as how they are stuffed full of details. Yet searching logs for indications of compromise (IOCs) is not an easy job.

One project to help security teams identify suspicious or even malicious activity is the open source Sigma project.

SigmaHQ created a pySigma Grafana Loki backend, which can take the Sigma rules you are interested in searching for and produce a Log
 
 
cloud.google.com cloud.google.com
 
5 steps to help make your software supply chain more secure
 
 
From Google's new report on supply chain security vulnerabilities, CISO Phil Venables offers five tips on how Google Cloud can help secure your software.

These recommendations can enable customers to benefit from Google’s extensive security experience and reduce their need to develop, maintain, and operate complex processes to secure their open source dependencies .

Google also strongly recommends you evaluate how you distribute software and the terms of software licenses in all of your dependencies.
 
 
www.neowin.net www.neowin.net
 
Python developers, uninstall this malicious package right now   ✅
 
 
PyTorch, an open-source machine learning framework, has seemingly been the target of a supply chain attack.

A problematic package with the same name was uploaded to the Python Package Index (PyPI) repository over the holidays. An investigation by PyTorch determined that the malicious "torchtriton" package sent system data from a user's computer to a recent domain.

The owner of the malicious package and the domain where user data was being sent defended their actions as being ethical research and apologized.
 
 
blog.phylum.io blog.phylum.io
 
Report: Evolution of Software Supply Chain Security
 
 
Phylum analyzes open-source packages’ source code and metadata as they are published into several popular ecosystems.

This year, they analyzed 627M source files across 11M package publications. Phylum reported on three large-scale campaigns targeting NPM and PyPI, with many smaller campaigns occurring during the last six months.

Developers are the new high-value targets, and attackers are exploiting this friction to gain an advantage in targeting developers directly. The battle between security teams wanting more visibility and developers wanting to code without interruptions has caused noticeable friction between these two teams.
 
 
 
📺 Quick Hits
 
 
With just one click, admins in GitHub Advanced Security organizations can protect their custom patterns on push.
 
 
A high-severity security vulnerability in the Kyverno admission controller for container images could allow malicious actors to import a raft of nefarious code into cloud production environments.
 
 
⭐ Supporters
 
faun.dev faun.dev
 
Post Developers Jobs for Free on FAUN
 
 
FAUN's Job Board offers an exceptional platform to connect with skilled developers, DevOps professionals, and software engineers who are eager to contribute to the success of your organization.

Post your job openings on FAUN's Job Board today and watch your talent pool grow.

Get started now .
 
 
faun.dev faun.dev
 
Join Humans Behind Code
 
 
👉 If you're a Developer or a maintainer of a widely adopted Open Source project and you think it's worth talking about it and your experiences in building it, join Humans Behind Code and get interviewed and published on faun.dev!
 
 
faun.dev faun.dev
 
Advertise with FAUN
 
 
Meet developers where they are, not where you want them to be. Fill out the form and download our mediakit .
 
 
👉 Spread the word and help developers find you by promoting your projects on FAUN. Get in touch for more information.
 
🛍️ Swag, Deals, And Offers
 
 
⭐ Kubernetes Mug
 
 
⭐ "My Code, My Rules" Mousepad
 

❤️ Get a 20% exclusive discount on all our swag (with free shipping) when you use the code "THANKSFAUN".

 
📚 Book picks
 
www.amazon.com www.amazon.com
 
⭐ Python for Devops: Learn Ruthlessly Effective Automation
 
 
Learning how to interact and automate with Linux is essential for millions of professionals. Python makes it much easier. With this book, you'll learn how to develop software and solve problems using containers, as well as how to monitor, instrument, load-test, and operationalize your software. Looking for effective ways to "get stuff done" in Python? This is your guide.
  • Python foundations, including a brief introduction to the language
  • How to automate text, write command-line tools, and automate the filesystem
  • Linux utilities, package management, build systems, monitoring and instrumentation, and automated testing
  • Cloud computing, infrastructure as code, Kubernetes, and serverless
  • Machine learning operations and data engineering from a DevOps perspective
  • Building, deploying, and operationalizing a machine learning project
 
 
 
⚙️ Tools, Apps & Software
 
github.com github.com
 
kuzeyardabulut/azure-assessment
 
 
Azure Security Assessment Tool with Rust Language
 
 
github.com github.com
 
brcyrr/PracticalCyberSecurityResources
 
 
This repository contains a curated list of resources I suggest on LinkedIn and Twitter
 
 
github.com github.com
 
project-copacetic/copacetic
 
 
CLI tool for directly patching container images using reports from vulnerability scanners
 
 
github.com github.com
 
SunWeb3Sec/Kubernetes-security
 
 
Kubernetes pentesting, hardening and hunting tools.
 
 

👉 Spread the word and help developers find and follow your Open Source project by promoting it on FAUN. Get in touch for more information.

 
🤔 Did you know?
 
 
ENIAC (Electronic Numerical Integrator and Computer) was the first programmable, electronic, general-purpose digital computer, completed in 1945.
 
 
😂 Meme of the week
 
 
 
 
❤️ Thanks for reading
 
 
👉 Never miss an issue
Join FAUN Developer Community and subscribe to our newsletter here.

👋 Keep in touch and follow us on social media:
- 💼LinkedIn
- 📝Medium
- 🐦Twitter
- 👥Facebook
- 📰Reddit
- 📸Instagram

👌 Was this newsletter helpful?
We'd really appreciate it if you could share it with your friends! You can also donate to help us keep this newsletter going.

ℹ️ Have a question or feedback?
Feel free to reach out to us at community@faun.dev. We'd love to hear from you!

🤩 Want to sponsor our newsletter?
Reach out to us at sponsors@faun.dev and we'll get back to you as soon as possible.