Jared Naude

Cloud Architect & Security Engineer.
Security researcher focused on national security and foreign policy.
Organizer @BSidesCapeTown & @BSidesJoburg

[Jared Naude @JaredNaude]

Someone created a "37c3" message in morse code with IPv6 packets that is visible from the monitoring system.

Super cool 😎
#37c3

[Jared Naude @JaredNaude]

To mark the start of 2026, I made a short montage of the 2025 news events that stood out to me. Wildfires in LA, AI and privacy concerns, aviation accidents, space launches, Eurovision, and Poland's rebuke to Russia at the UN.

[Jared Naude @JaredNaude]

Nothing is more poetic than driving past the US Embassy on the way to work and seeing the US flag at half mast on inauguration day.

[Jared Naude @JaredNaude]

@martin_casado Would like an invite

[Jared Naude @JaredNaude]

Are cloud defenders focusing on the right issues when securing cloud environments? This is what I will be discussing during my talk at BSides Cape Town in December.

[BSides Cape Town @BSidesCapeTown]

🎤 BSides 2024 SPEAKER ANNOUNCEMENT 🎤

"Cloud Security Theater: Rising above the Noise of Misguided Strategies" - Presented by Jared Naude

"To secure cloud environments effectively, a modern operating model needs to be created to solve the real security challenges faced during cloud adoption. However, are security teams focusing on the right problems when it comes to cloud security or we are just doing Cloud Security Theater?"

Watch this space as we unveil more speakers and talks we have lined up!

[Jared Naude @JaredNaude]

You know you are having an impact on internal security culture when developers start making threat intel jokes during company meetings.

[Jared Naude @JaredNaude]

Watching at the Pwnie's at Defcon and saw this in the nominations 😂

[Jared Naude @JaredNaude]

These kinds of vulnerabilities extend to AssumeRoleWithWebIdentity where if a condition is not include in a trust policy, attackers could use the trust to a provider to gain unauthorized access to an AWS account. AWS has only fixed this for GitHub.

[Jared Naude @JaredNaude]

A confused deputy attack that was found in AWS AppSync. Really cool piece of research @Frichette_n
#Defcon

[Jared Naude @JaredNaude]

@leonjza @singe Is this Terraform or Cloudformation?

[Jared Naude @JaredNaude]

I feel vindicated after rallying against the use of CodeCommit now that AWS has decided to discontinue it. Storing code in an AWS account is a recipe for disaster.

In addition, AWS is also deprecating S3 Select, CloudSearch, Cloud9, SimpleDB, Forecast and Data Pipeline.

[Jeff Barr ☁️ @jeffbarr]

After giving it a lot of thought, we made the decision to discontinue new access to a small number of services, including AWS CodeCommit.

While we are no longer onboarding new customers to these services, there are no plans to change the features or experience you get today, including keeping them secure and reliable.

We also support migrations to other AWS or third-party solutions better aligned with your evolving needs. Keep the feedback coming. We’re always listening.

[Jared Naude @JaredNaude]

Some thoughts on XZ Utils Backdoor https://t.co/K1U5XT81S7

[Jared Naude @JaredNaude]

@riskybusiness Having a car safety hammer to cut a seat belt and break a window is a good idea.

[Jared Naude @JaredNaude]

My team and I trying to understand the migration from @steampipeio to @powerpipeio and eventually how @flowpipeio will fit into our workflows.

[Jared Naude @JaredNaude]

My 2024 Geopolitical Bingo Card

[Jared Naude @JaredNaude]

Happy New Year everyone!

[Jared Naude @JaredNaude]

Happy New Year Australia!

[Jared Naude @JaredNaude]

Next up is the post team. 4386 postcards were sent externally of which 3125 were to Germany and 58 were to other countries. 38k postcards were used internally for the event. #37c3

[Jared Naude @JaredNaude]

37c3 infrastructure review

The infrastructure review is usually one of my favorite talks to get to see behind the scenes and the work that many teams did to make the event possible.
#37c3

[Jared Naude @JaredNaude]

Next up is the fashion operations center, who sold 8 products with a total of 78 size variations. There were 3755 preordered items. #37c3