SANS ISC Stormcast Feb 3rd 2025: Automating Cyber Ranges; Deepseek Scams; PyPi Archived State; Medical Backdoors


Episode Artwork
1.0x
0% played 00:00 00:00
Feb 02 2025 6 mins   460


To Simulate or Replicate: Crafting Cyber Ranges

Automating the creation of cyber ranges. This will be a multi part series and this part covers creating the DNS configuration in Windows

https://isc.sans.edu/diary/To%20Simulate%20or%20Replicate%3A%20Crafting%20Cyber%20Ranges/31642

Scammers Exploiting Deepseek Hype

Scammers are using the hype around Deepseek, and some of the confusion caused by it's site not being reachable, to scam users into installing malware. I am also including a link to a "jailbreak" of Deepseek (this part was not covered in the podcast).

https://www.welivesecurity.com/en/cybersecurity/scammers-exploiting-deepseek-hype/

https://lab.wallarm.com/jailbreaking-generative-ai/

PyPi Archived Status

PyPi introduced a new feature to mark repositories as archived. This implies that the author is no longer maintaining the particular package

https://blog.pypi.org/posts/2025-01-30-archival/

ICS Mecial Advisory: Comtec Patient Monitor Backdoor

And interested backdoor was found in a Comtech Patient Monitor.

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01