Digest #163: AI Password Leaks, ClickHouse Buys HyperDX, GitHub ruby-saml Bugs & Terraform, Kubernetes, FinOps Pipelines

Data leaks, big acquisitions, and security flaws—plus easy guides on Kubernetes deployments, Terraform best practices, Helm integration, securing FinOps pipelines, and practical open-source tools.

Welcome to this week’s edition of the DevOps Bulletin!

We share surprising news on ClickHouse acquiring HyperDX, and reveal newly discovered ruby-saml vulnerabilities on GitHub. Plus, check out highlights from the latest State of FinOps 2025 report.

Our featured podcast tackles cloud networking's biggest headaches: moving from data centers to AWS, the hidden traps, unexpected wins, and security issues nobody talks about.

In our tutorials, get clear, easy-to-follow tips on zero-downtime Kubernetes deployments with AWS EKS, building reliable FinOps pipelines, and integrating Helm charts with Terraform. Plus, learn how attackers can execute code on millions of users—and how to prevent it.

We also highlight practical open-source tools, including Shef (a CLI for shell recipes), xlskubectl (Kubernetes management from spreadsheets), and XPipe, a shell-based hub for managing remote connections.

All this and more in this week’s DevOps Bulletin—don’t miss out!

Newsworthy Stories

• Finding leaked passwords with AI

• ClickHouse acquires HyperDX

• GitHub uncovers new ruby-saml vulnerabilities

• Thousands of records, including PII, were exposed online

• State Of FinOps 2025 report

Podcast of the week

Tutorials of the week

• Zero-Downtime Kubernetes deployments on AWS with EKS

• The six phases of cloud threat detection

• Kubernetes@Home – what do you do if your ISP changes your IP addresses?

• Key tools for clean, maintainable prod environments with Terraform

• How to gain code execution on millions of people and hundreds of popular apps?

• Integrating existing Helm Charts with Terraform for Kubernetes management

• A step-by-step guide to writing a System Design document

• Bulletproof your FinOps pipelines

• Building an AWS cloud asset inventory

Projects of the week

• Shef is a powerful CLI tool for cooking up shell recipes.

• xlskubectl is a spreadsheet to control your Kubernetes cluster.

• XPipe is a shell connection hub and remote file manager that allows you to access your entire server infrastructure from your local machine.

• Shite is a hot-reloading static site generator from shell.

• tfmcp is a command-line tool that helps you interact with Terraform via the Model Context Protocol (MCP).

Meme of the week

Cursor told me I should learn coding instead of asking it to generate it:

If you have feedback to share or are interested in sponsoring this newsletter, feel free to reach out via LinkedIn, or simply reply to this email.