Hello, welcome to the Tuesday, November 30th, 2021 edition of the Sansonet Storm Center's

Stormcast. My name is Johannes Ulrich, and I'm recording from Jacksonville, Florida.

We've got a new version of Wireshark, Wireshark 3.6.0, so a somewhat major version, and it comes with a small but if you have used

Vyars Shark extensively sort of annoying bug fix and that's the use of the not-equal

operator which well didn't work with IP addresses in the past. Now, Vyarshark was helpful enough to indicate that with a tooltip and with a yellow background color for the filter window.

But, well, this is finally fixed now, so you are able to use the not equal operator with IP addresses as you probably

always wanted to use it. Of course, the old method of using not and then in parentheses,

IP. Source equals and the IP address, that version will still work as it did before, and that sort of used to be the

workaround for this not equal bug. Well, and who knows, maybe next we'll get an update

to TSPDump that will use capital A instead of the dot for the AC flag, but, well, I wouldn't

get my hopes up on that change.

And Google's cybersecurity action team, or CAT, did release a report summarizing the last

year worth of compromises within Google's cloud offerings. So here we are talking about customers getting compromised,

and well, the number one issue here is passwords being either too weak or being stolen in

fishing attacks, two-factor authentication as Google, yet again, points out, offers adequate security for these threats.

And, well, once you're compromised, chances are extremely high that your cloud resources are being

used to mine crypto coins. Mining crypto coins inside cloud resources, of course, typically not effective,

but if you're not paying for the resource, then of course it works quite well. So nothing really

new or different from other cloud providers. And yet again, you don't have a perimeter to protect you.

Yes, inside your perimeter, it's not a great idea, but you were often able to get away

with weak passwords and such.

You can't get away with that in the cloud.

...