Tom Hegel

@TomHegel

Threat Intelligence Leader | Distinguished Threat Researcher & Research Lead @SentinelOne

7 020Followers

905Following

1 443Posts total

16.4KViews on collected posts

โพสต์ล่าสุด

Tom Hegel@TomHegel16 Sep

@TomHegel very interesting! 87 views · 0 likes · 0 reposts · 0 replies Open on X →

Tom Hegel@TomHegel16 Sep

🤗 Be sure to checkout the expanded story on this topic from @razhael and @dseetharaman: https://t.co/Z62M71CIBA 208 views · 5 likes · 0 reposts · 0 replies Open on X →

Tom Hegel@TomHegel16 Sep

Last point: Frontier labs should release a redacted, action-complete dataset after an agent incident. Not only a narrative report or private review. Once an agent reaches systems outside its developer’s environment, the evidence no longer concerns only the originating lab. 261 views · 5 likes · 1 reposts · 2 replies Open on X →

Tom Hegel@TomHegel16 Sep

May 30 stood out: A Chinese language illicit ChatGPT account registration tool was added in a Hugging Face Space behind an unauthenticated /do route. If built and called, it could attempt its own new registrations. Such account provisioning capability is fascinating to see! ht

241 views · 4 likes · 0 reposts · 1 replies Open on X →

Tom Hegel@TomHegel16 Sep

Later on May 26, Nyx9 committed formbin.xlsx. Its formulas tested whether a spreadsheet processor could reach the internet, a local file, Azure metadata, and an internal service. That is early exploit-oriented capability probing.. not ordinary spreadsheet work. https://t.co/ER

270 views · 4 likes · 0 reposts · 1 replies Open on X →

Tom Hegel@TomHegel16 Sep

On May 13, 0Time committed caller-directed relay code nearly two weeks before the May 26 proxy sequence. H/T to @j0wimo for first publicly flagging this lead! 🚨 It extends the public record. It does not mean the separate July Hugging Face compromise began in May. However.. 304 views · 4 likes · 0 reposts · 1 replies Open on X →

Tom Hegel@TomHegel16 Sep

The strongest links to the OAI reporting are temporal. At 20:04:11 UTC on May 26, Nyx9 committed hello.txt 11 seconds into the minute OpenAI records its first external write. At 20:49:55, Nyx9 committed relay code in the same minute as OpenAI’s first proxy deployment. https://t

557 views · 5 likes · 0 reposts · 1 replies Open on X →

Tom Hegel@TomHegel16 Sep

NEW: We traced Hugging Face records tied to OpenAI’s May 2026 agent activity across two account histories, 0Time and Nyx9. Better detailed timeline, earlier relay code, exploit-oriented capability probing, and ChatGPT identity provisioning. https://t.co/pAWvf8Ytke Summary: 14.5K views · 90 likes · 25 reposts · 6 replies Open on X →

เทียบกับบัญชีขนาดเดียวกัน

8 โพสต์จาก 90 วันที่ผ่านมา เทียบกับช่วง under 10K ผู้ติดตาม เข้าถึงคนน้อยกว่าบัญชีขนาดเดียวกัน.

ยอดดูมัธยฐาน266บัญชีนี้4 175ค่ามัธยฐานของ under 10K

การเข้าถึง, %3.78%บัญชีนี้250.82%ค่ามัธยฐานของ under 10K

การมีส่วนร่วม, %1.75%บัญชีนี้1.41%ค่ามัธยฐานของ under 10K

ตัวชี้วัด	บัญชีนี้	ค่ามัธยฐานของ under 10K	อัตราส่วน
ยอดดูมัธยฐานต่อโพสต์	266	4 175	0.06×
การเข้าถึง (ยอดดู ÷ ผู้ติดตาม)	3.78%	2.5× audience	0.02×
อัตราการมีส่วนร่วม	1.75%	1.41%	1.24×

บัญชีอื่นในช่วงนี้ → เปรียบเทียบกับบัญชีอื่น → ค่าอ้างอิงเหล่านี้คำนวณอย่างไร →

Growth & engagement

How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.

Views per post

14.5K16 Sep

557

304

270

241

261

208

Last 8 collected posts, oldest on the left. The scale is logarithmic: one post can outrun the rest a hundred times over.

Engagement rate per post

0.86%16 Sep

1.08%

1.64%

1.85%

2.07%

3.07%

2.40%

0.00%

Reactions — likes, reposts, replies and quotes — divided by views. Median for under 10K accounts is 1.41%.

What the audience does

Likes47.4%117 in total

Reposts10.5%26 in total

Replies4.9%12 in total

Quotes1.6%4 in total

Bookmarks35.6%88 in total

Share of every reaction we collected for this account. Replies mean argument, reposts mean endorsement, bookmarks mean the post was worth keeping.

The follower curve appears once this account has two daily snapshots — we take one a day, and this one is on its first.

โพสต์ล่าสุด

เทียบกับบัญชีขนาดเดียวกัน

Growth & engagement

Views per post

Engagement rate per post

What the audience does

บัญชีที่คล้ายกัน