SANS ISC Stormcast Feb 3rd 2025: Automating Cyber Ranges; Deepseek Scams; PyPi Archived State; …

SANS ISC Stormcast Feb 3rd 2025: Automating Cyber Ranges; Deepseek Scams; PyPi Archived State; Medical Backdoors
To Simulate or Replicate: Crafting Cyber Ranges
Automating the creation of cyber ranges. This will be a multi part series and this part covers creating the DNS configuration in Windows
isc.sans.edu/d...
Scammers Exploiting Deepseek Hype
Scammers are using the hype around Deepseek, and some of the confusion caused by it's site not being reachable, to scam users into installing malware. I am also including a link to a "jailbreak" of Deepseek (this part was not covered in the podcast).
www.welivesecu...
lab.wallarm.co...
PyPi Archived Status
PyPi introduced a new feature to mark repositories as archived. This implies that the author is no longer maintaining the particular package
blog.pypi.org/...
ICS Mecial Advisory: Comtec Patient Monitor Backdoor
And interested backdoor was found in a Comtech Patient Monitor.
www.cisa.gov/n...
keywords: comtech; medical; backdoor; pypi; deepseek; dns; cyber range

[@jaypee9458]

Thank you sir! 👍🏾👍🏾👍🏾👍🏾

[@angrydachshund]

Ty

[@StarOfDavidKush]

05:05 As someone that consults hospitals and maintains a 100% uptime environment in the form of redundant virtual private data centers in a large datacenter, I find the ICS medical advisory about the Comtec Patient Monitor backdoor fascinating. Thank you very much for the great information and podcast Dr. Ullrich.

[@internetstormcenterstormca2350]

Thanks for the feedback.

[@StarOfDavidKush]

Opa