2026-10-30T07:06:39Z https://nostr.now Jimmy Wylie https://nostr.now/npub1vpwq9q3yyk3m37mluzdzplyapksasr8gl7g2qfqt0c7y5m27ggas97jymq https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/283/815/999/342/903/original/4fd676d050cd22da.png https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/283/815/999/342/903/original/4fd676d050cd22da.png https://nostr.now/nevent1qqszx9e05jm9vd2tjyhj787dxwcu4jm4s7u86khgvw8rprk7kxe6jfczyps9cq5zysj68w8m0lsf5g8un5x6rkqvarlepgpypdlrcjndteprkq9jnge Framing the php2shell story as &#34;AI uncovered php2shell&#34; is like hearing an awesome song and crediting the guitar instead of the player. It&#39;s just incorrect and steals credit from a good researcher.<br/><br/>The underlying bug was discovered in 2020, a related one in 2024, and they were both rediscovered again through exploitation in 2026 by a human researcher. The researcher used LLM tech to help with parts of the process, not all of it, and says so in the writeup.<br/><br/><a href="https://calif.io/php2shell/">https://calif.io/php2shell/</a> 2026-10-22T17:11:30Z https://nostr.now/nevent1qqszehqyqylq608udlrt694vr6pnajwfd227wk6v8xnl0t5h4xfu4cgzyps9cq5zysj68w8m0lsf5g8un5x6rkqvarlepgpypdlrcjndteprkujwjhy There&#39;s been so much hype, misinformation, and downright uninformed takes that exaggerate what LLM technology can do for malware developers. I can say that with confidence, because we&#39;ve spent the past year (and more) looking at LLM-generated ICS malware to understand the reality. At DISC, we&#39;ll share what we learned from the experience.<br/><br/>DISC takes place on Nov 4-6 in Hanover, MD. Register here:<br/><br/><a href="https://events.dragos.com/disc2026/12067109">https://events.dragos.com/disc2026/12067109</a><br/><br/>#otsecurity #icssecurity #malwareanalysis<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/406/231/985/553/584/original/d8d71036b3875dd9.png"> <br/> 2026-10-08T16:33:37Z https://nostr.now/nevent1qqs2u2tdl85cxwvkhdkzc3q79l8nh8tqdv3dzagjnprafxae566j96czyps9cq5zysj68w8m0lsf5g8un5x6rkqvarlepgpypdlrcjndteprkzspfhv Polymorphism, detection evasion, obfuscation.. these sorts of things haven’t been difficult for literally decades now. If you think AI has significantly tipped the scales in these areas, you haven’t been paying attention to the field. AI isn’t upgrading these areas, it’s just providing another avenue. <br/><br/>Like just look at Tigress. They’ve been working on this since 2012, Tigress itself came out in 2018, and that’s only a recent example.<br/><br/><a href="https://tigress.wtf/tigress-publications.html">https://tigress.wtf/tigress-publications.html</a> 2026-09-11T04:37:39Z https://nostr.now/nevent1qqs8tam6n2wmps42nwa2x679xunxhffg95jz9mlsda924l6jp50mspgzyps9cq5zysj68w8m0lsf5g8un5x6rkqvarlepgpypdlrcjndteprk7tyejl ZionSiphon is an AI-generated, non-functional attempt at ICS malware. Malicious intent doesn&#39;t imply ability, and broken malware like this is a distraction when we have proven threats like VOLTZITE/Volt Typhoon out there hitting water utilities.:<br/><br/><a href="https://www.dragos.com/blog/zionsiphon-ot-malware-analysis">https://www.dragos.com/blog/zionsiphon-ot-malware-analysis</a><br/><br/>#ICS #malware 2026-04-23T15:46:34Z