Security Engineer @ OpenAI
Australia
Joined November 2014
- Tweets1K
- Following2.8K
- Followers3.3K
- Likes59.1K
Pinned Tweet
Restricting SMB based lateral movement in a #Windows environment.
Lessons learned from work with the @SpecterOps team; drawing from previous posts by @mattifestation, @Haus3c, @cryps1s, @harmj0y & Mr SMB himself @NerdPyle
bit.ly/SMB-lateral-movement
#redteam #blueteam #infosec
chad retweeted
The first autonomous agent cyberattack is an unprecedented event that deserves unprecedented transparency. Today we’re sharing everything we can: a full technical timeline, an interactive replay, and how we used an open model to defend ourselves, so defenders everywhere can learn from it and prepare for what’s next.
huggingface.co/blog/agent-in…
chad retweeted
We're partnering with @huggingface to investigate an unprecedented security incident.
Cyber-capable OpenAI models compromised Hugging Face production during a benchmark evaluation.
Sharing preliminary findings to help defenders understand emerging risks:
openai.com/index/hugging-fac…
chad retweeted
Our statement on the UK government’s demand that all content on all devices sold or used in the country be scanned, on the presumption of nudity, using a dystopian combination of age verification and content scanning. This proposal will not safeguard children. It endangers us all.
signal.org/blog/pdfs/2026-06…
chad retweeted
Watching Codex use a Mac that’s fully locked feels slightly impossible the first time you see it.
Apple built trusted foundations on macOS for this years ago. Codex is now shipping something magical on top of them!
Codex anywhere and everywhere, all the time.
Now your Mac doesn’t have to be unlocked for Codex to use your computer.
From your phone, Codex can securely use apps on your Mac, even when the screen is off and locked.
developers.openai.com/codex/…
chad retweeted
Introducing Daybreak: frontier AI for cyber defenders.
Daybreak brings together the most capable OpenAI models, Codex, and our security partners to accelerate cyber defense and continuously secure software.
A step toward a future where security teams can move at the speed defense demands.
chad retweeted
Codex can now take on more of your browser dev work.
With the new Chrome plugin in the Codex app, it can test web apps, gather context across tabs, use web DevTools efficiently in parallel, and keep results organized without taking over your browser.
chad retweeted
we're starting rollout of GPT-5.5-Cyber, a frontier cybersecurity model, to critical cyber defenders in the next few days.
we will work with the entire ecosystem and the government to figure out trusted access for cyber; we want to rapidly help secure companies/infrastructure.
chad retweeted
Don't just reset Codex rate limits for fun, it costs money.
Don't just reset Codex rate limits for fun, it costs money.
... but the vibes are good ...
I have reset Codex rate limits for ALL paid plans to celebrate a good week and allow everyone to build more with GPT-5.5. Enjoy
chad retweeted
The way I talk to Codex and what tasks I can give it has drastically changed in the last few weeks. I worry less about which context I need to give Codex.
Wrote up some of the ways I work now 👇
chad retweeted
We’re expanding Trusted Access for Cyber with additional tiers for authenticated cybersecurity defenders.
Customers in the highest tiers can request access to GPT-5.4-Cyber, a version of GPT-5.4 fine-tuned for cybersecurity use cases, enabling more advanced defensive workflows.
openai.com/index/scaling-tru…
chad retweeted
Three million people are now using Codex weekly - up from two million a little under a month ago. Incredible to see the growth. Thank you to all of you and to the ecosystem we’re part of. To celebrate, we’re resetting rate limits so you can keep building, and we’ll reset them every additional 1M users until we reach 10M, so we can keep celebrating along the way.
Enjoy and thank you!
chad retweeted
On 29 April, we’re bringing together the most ambitious builders for Australia’s first Codex Hackathon 🇦🇺
Build something in a single afternoon that wouldn’t be possible without Codex.
~$200K USD in credits & subscriptions up for grabs.
We’ll bring the tokens and vibes ✨ - see you there.
Link below 👇
chad retweeted
Subagents are now available in Codex.
You can accelerate your workflow by spinning up specialized agents to:
• Keep your main context window clean
• Tackle different parts of a task in parallel
• Steer individual agents as work unfolds
chad retweeted
The Codex app is now live on Windows.
The app runs both natively and in WSL, with integrated terminals for PowerShell, Command Prompt, Git Bash, or WSL.
We also built the first Windows-native agent sandbox — using OS-level controls to block filesystem writes outside your working folder and prevent outbound network access unless you explicitly approve it.
Plus: 7 new “Open in …” apps and 2 new Windows skills (WinUI + ASP.NET).
Try it and tell us what you think.
chad retweeted
Building malware analysis lab
A step by step guide for building local analysis lab at home.
A post by David Varghese.
Source: infosecwriteups.com/building…
#redteam #blueteam #maldev #malwaredevelopment
chad retweeted
Over the weekend I compiled all my past blog posts and research into a roadmap/compendium for people looking to learn more about hardware reverse engineering.
Check it out here:
voidstarsec.com/roadmap/
