CEO @ RemoteThreat & Founder of Offensive AI Con | Former Head of X-Force Adversary Services | Black Hat Review Board | inveni et usurpa

San Diego, CA
Joined June 2011
Today, we're proud to finally bring @RemoteThreat out of stealth with the first integrated, end-to-end offensive cyber operations (OCO) platform. Much of the focus today is on patching as fast as possible against noisy AI-driven attacks. We expect the next phase to arrive soon: models optimized for stealth, connected to sophisticated payloads and nation-state-tier offensive tools. Those attacks will be designed to evade detection, maintain access, and adapt as defenses respond. Enterprise security teams need to start testing against that level of sophistication now. Evolving U.S. policy is also opening new opportunities for commercial offensive cyber. We see an emerging market for dual-use technology that strengthens enterprise security and supports authorized operational missions. That convergence of capability, policy, and operational demand makes the timing consequential. RemoteThreat is built for internal enterprise red teams and warfighters. Its composable capabilities let operators select, combine, and customize tooling around their environment and objective. Internal red teams can vary sophistication to match the adversary they’re emulating. Warfighters can configure capabilities for the mission and adapt as conditions change. These capabilities are available to human operators, hybrid human–AI teams, and AI operators. The platform connects planning, capability development, command and control, execution, and analysis- with existing tools, human oversight, and approvals integrated throughout. It’s been a significant journey building this alongside my co-founder, Shawn Jones @anthemtotheego . We’re now 15 strong and growing, with some of the most talented security researchers I’ve ever worked with. Given the sensitive nature of our work, some of our people will remain out of the spotlight. I couldn’t be prouder of this team and what we’ve built together. If you lead an internal enterprise red team or build capabilities for the warfighter, I’d welcome a conversation. businesswire.com/news/home/2…
16
28
3
165
9,497
Big personal news: my labradoodle officially is cancer free as of yesterday! Naturally we had to celebrate with bubbles, rawhide and a new toy lobster over a sunset last night. Here’s to another 13 years!
5
1
63
3,998
Chris Thompson retweeted
An open letter for a global surge in cyber defense, signed by over 100 organizations including Anthropic, AWS, Google, Microsoft, OpenAI, and Oracle.
412
686
381
3,965
1,421,162
I spoke with Lorenzo Franceschi-Bicchierai at TechCrunch about frontier-model verification programs and cyber guardrails. My view is that the current approach is still creating too much friction for legitimate offensive-security researchers. The same community that has spent decades finding, validating, and helping remediate critical vulnerabilities is eager and ready to apply frontier models to that work at far greater speed and scale, yet they're currently being ignored, under utilized, and hindered with the current guardrails, even when they are "verified" and given access to slightly less restrictive, yet inconsistent, guardrails. What frontier labs fail to recognize is that their models were built on decades of community research, late nights finding bugs, and exceptional open-source work, yet they have not meaningfully brought that same community into the fight. The answer lies in broader, verified access with materially reduced restrictions for legitimate researchers, clear rules of engagement, appropriate monitoring, and real accountability for abuse (aligned to existing law). By keeping capable researchers constrained or pushing them toward less accountable foreign and open-weight systems, we risk sidelining some of the people best positioned to strengthen critical infrastructure before AI-enabled attacks accelerate.
1
4
18
1,243
The sun is setting on submissions for OAIC 2026. The Call for Papers closes July 31. Selected speakers receive: • A complimentary three-day OAIC conference ticket • Three hotel nights at a 4 star beachside resort • An invitation to our Michelin-star VIP speaker dinner • Meals, drinks, and official parties throughout the event • Travel stipends for qualifying academics and seed-stage startups • The opportunity to present alongside leading offensive AI researchers in an intimate, vendor-free environment Join us at a luxury seaside resort in San Diego and help define the next generation of offensive AI. Submit before the sun sets on July 31.
The sun is setting on submissions for OAIC 2026. The Call for Papers closes July 31. We are looking for original, practical research advancing the offensive use of AI, presented by the researchers and practitioners doing the work. Join us seaside in San Diego
1
6
1,453
Chris Thompson retweeted
i love this exploit! universal SELinux bypass still works to this day. I released it for Qualcomm based processors and just realized I never released the Exynos version so here it is unprivated: github.com/chompie1337/s8_20…
Replying to @cr3ghost
"Android kernel exploitation bypassing DAC, SELinux, and Knox" - I don't see this? @chompie writes that io_uring exploits could be potentially used for SELinux bypass, is that what you mean?
5
66
1
419
39,963
Chris Thompson retweeted
yday anthropic's red team (@logangraham + team) shared their post on claude's performance developing n-days i've been working on a similar benchmark for a bit now and in light of the recent post, it seems like a good time to share some progress and lessons! thread below
1
10
1
33
6,098
Chris Thompson retweeted
Invites are going out! Year 1 attendee invitations have been sent, and the first wave of ticket emails for new attendees is now rolling out in batches as we validate our new ticketing email flow. Keep an eye on your inbox and add remotethreat.com to your safe senders
1
3
585
OAIC's CFP is now open! The first conference dedicated to the cutting edge of the offensive use of AI is returning for its second year. Speakers will enjoy three nights at a four-star beachfront resort, which includes all meals and drinks, three exclusive parties, and a Michelin-star welcome dinner. Please see sessionize.com/offensive-ai-… for accepted topics.
1
8
1
25
3,360
Chris Thompson retweeted
The year is 2026. Your cat falls asleep on your keyboard and finds a low-sev bug but doesn't report it. A Predator drone spawns above your house
4
11
1,060
Chris Thompson retweeted
The best talks don’t happen by accident. Our speakers put in the work, so we’re making sure they’re treated accordingly: a Michelin-star VIP dinner. Great researchers. Real operators. Technical leaders. Call for Papers opens June 1.
1
6
688
Confirmed! @chompie1337 of IBM X-Force Offensive Research (XOR) used a single bug to exploit NV Container Toolkit, earning $50,000 and 5 Master of Pwn points. #Pwn2Own #P2OBerlin
5
24
3
317
104,588
Confirmed! @chompie1337 of IBM X-Force Offensive Research (XOR) used a race condition to escalate privileges on Red Hat Enterprise Linux for Workstations, earning $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin
12
44
6
634
128,466
Chris Thompson retweeted
Claude helped me with this bug too but in a different way... Tried to gaslight me saying it wasn’t ~exploitable in practice~ and I got obsessed with proving it wrong 😩
Confirmed! @chompie1337 of IBM X-Force Offensive Research (XOR) used a race condition to escalate privileges on Red Hat Enterprise Linux for Workstations, earning $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin
46
101
14
1,390
97,520
The frontier labs don’t want you to know this, but stickers add +10% inference speed to local AI racks 🤫
9
5
1
106
5,544
Chris Thompson retweeted
We’re proud to introduce the Offensive AI Con 2026 Review Board. This year, we’ve brought together 12 of the most respected minds across offensive security, AI research, and real-world adversarial operations to help shape the direction of OAIC. The CFP opens June 1st!
1
11
2
49
11,727
Chris Thompson retweeted
35
594
32
9,382
312,835
After 13 incredible years at IBM, I’m stepping away to start building something new. IBM has been a defining part of my life. I’m especially proud to have founded and grown the Adversary Simulation team and to have served as a Distinguished Engineer focused on AI and offensive security. What began as a small idea became one of the greatest red teams, pushing the boundaries of what real-world adversary simulation can look like - made possible by an exceptional group of people I learned from every day. I’m deeply grateful to the X-Force leadership and to the teammates, mentors, researchers, and operators who made the journey what it was. The team is in great hands and will continue to do important, impactful work. Looking ahead, I’m excited to focus on building what’s next - continuing to raise the bar for offensive cyber and exploring how AI can enable high sophistication offensive cyber operations and capabilities at a speed, scale, and intensity never before seen. It’s still early, but I’m looking forward to sharing more soon. I truly appreciate everyone who’s been part of the journey.
16
8
105
7,563
We're look to expand some local meetups in DC and UK in the future, hit me up if you want to help out!
We're excited to announce that OAIC will return for its second year, October 4–7, 2026. The response to the first event far exceeded expectations, and we’re incredibly grateful for the enthusiasm and support from the community. Request an invite at offensiveaicon.com
3
1,010
Chris Thompson retweeted
1/ Agentic LLMs can automate vuln detection. Very exciting, but doesn't address the hardest part (imo) of vuln research: prioritization. Can we reliably explore the search space and separate signal from noise? I wrote a paper (and OSS tool) to solve this. arxiv.org/pdf/2512.06155
2
60
4
219
106,914