iiinova — where your digital self keeps evolving

Jimmy Wylie @mayahustle.com · 19/02/2026

I earned my first CVE credit (CVE-2025-7676) for helping with a Windows ARM vuln. So, to commemorate the credit, my coworker, Reid, presented me last week with a Trophy of Perpetual Futility, because there’s always more work to do. raw.githubusercontent.com/reidmefirst/...

Photo of smiling Jimmy holding a gold and red trophy in right hand. The top of the trophy is a gold statue of a king holding a sceptre. The king is standing on a red column, with a white base and a gold plaque.

Hand holding a trophy of king standing on a column. At the base of the column is the text:
‘MY NAME IS OZYMANDIAS, KING
OF KINGS; LOOK ON MY WORKS,
YE MIGHTY, AND DESPAIR

1120

Jimmy Wylie @mayahustle.com · 10/02/2026

I've spent a lot of time reversing ICS malware. Recently, I've been building it with AI tools. While there's been plenty of commentary and news about AI and malware, I'm excited to share what I learned actually trying to build some at S4x26. Stage 2, Feb 24, 12pm.

021

Jimmy Wylie @mayahustle.com · 16/12/2025

I spent a couple months arguing with Claude and Copilot while building FrostyGoop variants for DNP3 (and Modbus), keeping detailed notes on what worked and what didn't. At S4, I’ll share my honest assessment of these tools and how they might lower barriers to ICS malware dev. See you in Miami!

031

Jimmy Wylie @mayahustle.com · 27/10/2025

I'm speaking at S4x26 on creating a FrostyGoop-style tool using AI. This experiment has been a good avenue for tackling a few questions I've had about AI-enabled software development. Most importantly, just how easy is it? I'm excited to share what I learn come February! 1/2

140

Jimmy Wylie @mayahustle.com · 10/10/2025

In ICS, malware analysis can feel like archaeology. I started the week with a 13 year old sample and ended the week with @sam-hans0n.bsky.social pinging about an 18 years old sample. So, save your old Windows ISOs and VMs, you might need them!

141

Jimmy Wylie @mayahustle.com · 08/10/2025

Thanks to @cybrseccon.bsky.social / HOU.SEC.CON for having us last week. (and for a really unique speaker gift!) The conference has grown into a valuable industry event, and I'm looking forward to the next one! ICYMI, we posted resources from our talk here: gist.github.com/maya...

040

Jimmy Wylie @mayahustle.com · 04/09/2025

This is a great story about Donald Knuth and Doug McIlroy participating in a literate programming exercise and a hilarious example of different perspectives in problem solving from godfathers of Computer Science. Original post: hachyderm.io/@mweagle/115...

010

Jimmy Wylie @mayahustle.com · 03/09/2025

Sam Hanson and I are speaking at @hou-sec-con.bsky.social on hunting for Python and Go ICS-related malware. You'll learn playbooks for these cases and hear stories about malware targeting ICS in the past year. The talk is on October 1st, at 1 p.m., Track 1. I hope you can make it! #ICS #OTSecurity

040

Jimmy Wylie @mayahustle.com · 25/08/2025

My reading list for the rest of the year, inspired by DEFCON 33 and the starting chapters of the first book: - Microcontroller Exploits - Goodspeed - Hack to the Future - Crose - Hardware Hacker - bunnie - Hardware Hacking Handbook - Van Woudenberg + O’Flynn - Art of Mac Malware (Vol 1+2) - Wardle

051

Jimmy Wylie @mayahustle.com · 15/08/2025

Played “In the Footsteps of Marie Curie” tonight. More of a family game, light on the strategy, easy playing. Good one for folks just getting into independent #boardgames

060

Jimmy Wylie @mayahustle.com · 12/08/2025

GoResolver was already awesome. Now, they added string extraction and definition in IDA/Ghidra and RTTI parsing and application — two big Golang reversing pain paints. I can’t wait to try it out this week. Original post: infosec.exchange/@volexity/11...

032

Jimmy Wylie @mayahustle.com · 24/06/2025

Revive! I’m not sure how to categorize this game. Like a worker placement/deck building hybrid that feels like tile placement. Despite how complicated it looks, it’s not hard to learn how to play, and it allows many types of strategies. High replay value I think.

000

Jimmy Wylie @mayahustle.com · 20/06/2025

Busy Week! Grateful to SANS ICS for hosting my talk on ICS Malware. It was a great experience. We released our whitepaper on the subject ( www.dragos.com/resou... ). We also got word that my talk with Sam Hanson on assessing ICS threats was accepted at Defcon ICS village. Hope to see you there!

021

Jimmy Wylie @mayahustle.com · 13/06/2025

I almost quit computer science today because I found out there are ELEVEN hyphen chars in UTF-8, including a SOFT HYPHEN (0xC2 0xAD) which is a "discretionary hyphen" OR "an invisible format character indicating a possible hyphenation location" I didn't know UTF-8 believed in quantum hyphenation.

030

Jimmy Wylie @mayahustle.com · 27/03/2025

I haven't felt this level of anxiety at work in a while.

4272

Jimmy Wylie @mayahustle.com · 09/02/2025

Barrage: a game where you take on the role of an international corporation competing for hydroelectric dominance. Tried the Automa mode. Automa: 112, Me: 99. 😞

Depicts Barrage board game at the end of round 5. There are two players: black and red. Black has the bottom of the board, red most of the right side above.

130

Jimmy Wylie @mayahustle.com · 16/12/2024

Who knew the Philipinnes USPS office was so darn pushy! You'd better put me on payroll if you expect me to do this much work to infect myself. (+63 is Philipinnes, the link is malicious, please don't fall for this)

Message from a Philippinnes-based phone number claiming that USPS is holding a package at customs, along with a malicious link, and instructions for "activating the link" in the text message. It says to Reply Y to the text then exit the message and return, or copy the link into a browser.

000

Jimmy Wylie @mayahustle.com · 09/12/2024

Picked this up on a whim at PAX, and played it as soon as we got back. Delightful game, and easy to travel with: Sosig by Joking Hazard

Sosig card game (pronounced like Sausage).

Shows each players cards connected together to depict sausages of different colors and lengths.

000

Jimmy Wylie @mayahustle.com · 06/12/2024

I was an audience member for a few rounds of Underwater Cities (Rio Grande Games) that my buddy taught at #paxunplugged It’s a fun engine building/resource management game. Can be a lot to keep track of near the end, but that’s a small quibble.

130

Jimmy Wylie @mayahustle.com · 03/12/2024

We did it, thankfully. I don’t think I had the patience for another 3.5 hr+ attempt on this scenario.

010

Jimmy Wylie @mayahustle.com · 25/11/2024

After over a year, we’re finally attempting the last Frosthaven scenario! (I promise.. eventually I’ll post infosec content. But right now it’s Board Games and Corgis)

Frosthaven board game with 5 map tiles, 4 mini figurines for the player characters, 4 ally figures, and 4 enemy Living Doom figures.

5130

Jimmy Wylie @mayahustle.com · 24/11/2024

Her royal highness in all her majesty

2971

Jimmy Wylie @mayahustle.com · 23/11/2024

Howdy folks! I'm a malware analyst focused on critical infrastructure threats and ICS/OT malware. Aside from studying reverse engineering, I lift weights, play a lot of board games and try to keep my philosopher dog, Velma, entertained. Here's an example of my work: www.dragos.com/blog/analyzi...

Welsh corgi staring contemplatively out of a window.

103107