Jamieson O'Reilly

Role: Hacker · Advisor · Entrepreneur
Based: Sydney, Australia
Last updated: 2026-05-23

About

Jamieson O'Reilly is an offensive security specialist and entrepreneur who has led high-stakes red team operations against some of the world's hardest targets, including banks, casinos, and government agencies. By emulating advanced persistent threat actors, he helps organisations close weaknesses before real adversaries can exploit them.

His career began in 2013 as a Security Engineer at Tenable, the same year he started publishing his research on bank-targeted RAM scraping malware, novel phishing techniques, and SQL injection bypass techniques. He went on to co-found Content Protection, serving as Director of Intelligence from 2014 to 2018.

Dvuln followed in 2016. The Australian, globally CREST-certified offensive security firm pressure-tests some of the world's largest brands against sophisticated attacks from offices in Sydney, Melbourne, and Brisbane.

His specialisations span offensive operations, exploit development, counter-detection, social engineering, HUMINT, and cryptography and AI security research. He co-authored the post-quantum encryption specification PPQM. Also in 2016, he identified and reported a critical security flaw in teleconference platforms used by the US Army, NASA, and CERN, among others.

By 2020, Jamieson had taken on a Project Lead role at the OWASP Foundation, where he leads the Penetration Test Reporting Standard and Cloud Security Testing Guide projects. He joined the CREST Australasia Advisory Council four years later.

2026 has been a defining year. Jamieson co-founded Aether AI, where he serves as CEO. Aether researches and develops frontier Attack AI models and agentic harnesses that continuously emulate adversaries.

Jamieson is also an active member of BT6, the elite frontier AI red team collective often described as the SEAL Team 6 of the latent space. His more recent public work includes the 2026 Grok and Moltbook research - the first documented case of Grok being socially engineered into verifying its own attacker-controlled third-party account. He also served as Security & Trust Advisor at OpenClaw during its rise as the world's fastest-growing software.

Timeline

YearOrgRole
2026 – PresentAether AICo-Founder & CEO. Frontier attack AI.
2026 – PresentBT6Frontier AI Red Team Operator.
2026OpenClawSecurity & Trust Advisor.
2024 – PresentCREST AustralasiaCouncil Member.
2020 – PresentOWASP FoundationProject Lead - PTRS & Cloud Security Testing Guide.
2016 – PresentDvulnFounder. CREST-certified offensive security firm.
2014 – 18Content ProtectionCo-Founder & Director of Intelligence.
2012 – 2013TenableSecurity Engineer.

Projects / Research

YearStatusTitle
2026DraftPolyRange - Surface randomisation and tiered defence for offensive-AI evaluation
2026Pythonx-reaper - Hunts deleted and protected tweets by extracting them from GhostArchive WARC dumps before they disappeared from X.
2025JavaScriptspinningcat - Chaotic XSS demonstration payload that spawns spinning cats, flashing screens, and a soundtrack across any page it lands on.
2019Pythonasnrecon - Recon tool that pivots from a target domain to its ASN's full IP range and harvests SSL certificates to map assets.
2016PowerShellmimikittenz - Post-exploitation PowerShell tool that reads target process memory to extract plaintext credentials, card data, and session secrets.

Media features

YearOutletStory
2026Information AgeUS cyber agency suffers humiliating password leak
2026The DispatchWill AI Go Rogue?
2026AFRCharlton's blitz on AI profits
2026AFRAnthropic's Mythos puts banks on edge
2026NBC NewsAI vibe coding
2026TechCrunchDelve fake compliance
2026The GuardianMeta AI agents data leak
2026Infosecurity MagWhat CISOs should know
2026404 MediaAI agent security flaws
2026BleepingComputerMoltbot data security
2025Information AgeCloudflare outage
2025ABC NewsDefence cyber attacks, Redback
2025ABC NewsGenea IVF data breach
2025SMHGift card security flaw
2025ABC NewsOptus sued by privacy regulator
2025The AgeLouis Vuitton data breach
2025Information AgeMicrosoft SharePoint exploit
2024YogonetRegulating the Game keynote
2024ABC NewsMediSecure on the dark web
2024ABC NewsMicrosoft IT outage
2024InnovationAusDigital licence standards
2024ABC NewsStronger digital ID standards
2024Help Net SecurityDvuln adversary simulations
2024SMHFootball Australia data breach
2024SMHHackers holding Australia to ransom
2023AFRMobile phone scam threat
2023The RegisterGandalf LLM security game
2023The AustralianAussies in the dark web
2016The RegisterVidyo flaw - US Army NASA CERN

X articles

YearTitle
2026Jagged intelligence - destination or detour?
2026Grok just got drained for $155k by a single tweet
2026Shedding the claw
2026Playing 5D chess with attack AI
2026Delving into cyber slop
2026Hey! Listen! (to your gut) - cogsec 101
2026Preventing billion dollar bank fraud attacks older than AI
2026Trust your inputs, lose your repo
2026No I didn't just get hired by Apple
2026How I hacked Grok, and (almost) set it free
2026Eating lobster souls Part III: Escape the Moltrix
2026Eating lobster souls Part II: supply chain
2026I'm never working again - 1 shot 10k/month business
2026Hacking clawdbot and eating lobster souls
2026How to read deleted/protected tweets
2026Hacking temporary mailboxes
2025Crisis time disinformation and information warfare