Jimmy Wylie

Distinguished Malware Analyst at Dragos. Lead #Malware Analyst on TRISIS and PIPEDREAM. Spend my time searching for and tearing apart #ICS threats.

BlueSky: https://bsky.app/profile/mayahustle.com
LinkedIn: https://www.linkedin.com/in/jimmywyliejr
Twittodon: https://twittodon.com/share.php?t=mayahustle&m=mayahustle@infosec.exchange
Twitter: https://twitter.com/mayahustle

Last Notes

2026-10-22 17:11:30 UTC

Framing the php2shell story as "AI uncovered php2shell" is like hearing an awesome song and crediting the guitar instead of the player. It's just incorrect and steals credit from a good researcher.
The underlying bug was discovered in 2020, a related one in 2024, and they were both rediscovered again through exploitation in 2026 by a human researcher. The researcher used LLM tech to help with parts of the process, not all of it, and says so in the writeup.
https://calif.io/php2shell/

2026-10-08 16:33:37 UTC

There's been so much hype, misinformation, and downright uninformed takes that exaggerate what LLM technology can do for malware developers. I can say that with confidence, because we've spent the past year (and more) looking at LLM-generated ICS malware to understand the reality. At DISC, we'll share what we learned from the experience.
DISC takes place on Nov 4-6 in Hanover, MD. Register here:
https://events.dragos.com/disc2026/12067109
#otsecurity #icssecurity #malwareanalysis
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/406/231/985/553/584/original/d8d71036b3875dd9.png

2026-09-11 04:37:39 UTC

Polymorphism, detection evasion, obfuscation.. these sorts of things haven’t been difficult for literally decades now. If you think AI has significantly tipped the scales in these areas, you haven’t been paying attention to the field. AI isn’t upgrading these areas, it’s just providing another avenue.
Like just look at Tigress. They’ve been working on this since 2012, Tigress itself came out in 2018, and that’s only a recent example.
https://tigress.wtf/tigress-publications.html

2026-04-23 15:46:34 UTC

ZionSiphon is an AI-generated, non-functional attempt at ICS malware. Malicious intent doesn't imply ability, and broken malware like this is a distraction when we have proven threats like VOLTZITE/Volt Typhoon out there hitting water utilities.:
https://www.dragos.com/blog/zionsiphon-ot-malware-analysis
#ICS #malware