Richard Im
Contact

Security research / Apple ecosystems / AI + LLM

I find where machines trust text they shouldn’t.

I’m Richard Hyunho Im (@richeeta), a security researcher at Route Zero Security. I work across indirect prompt injection, authentication boundaries, lock-screen side channels, race conditions, and OAuth hijacking.

Read featured research View disclosure record
22+ Credited Apple
security reports
DEF CON 33 Main Stage
speaker
Top 25 OpenAI bug bounty
researcher, 2025
8× Apple
CVE credits

01 / Research

Selected work

Findings, tools, and field notes from the seams between language, permissions, and product behavior.

02 / Disclosure record

Apple CVEs

Selected vendor-attributed vulnerabilities. Each entry links to the corresponding Apple security advisory.

Additional Apple recognition View record

Also acknowledged by Microsoft Security Response Center, Google, BBC, and OpenAI.

03 / Talks

On stage

Research explained in public, with the demos and technical record left behind.

04 / About

@richeeta

The interesting bugs live between the boxes.

I’m Richard Hyunho Im, co-founder and security researcher at Route Zero Security. My work focuses on systems that interpret human language or move information across trust boundaries—especially Apple platforms and AI-enabled products.

I build reproducible proofs of concept, trace the actual boundary failure, and communicate it in a form product and security teams can act on. I also created AI Auditor and 0xGUIDScanner.

OSCP CASP+

Tooling

Reverse engineering
jtool2 · Hopper
Development & testing
Xcode · VS Code · BBEdit · Burp Suite · Parallels
Coding assistants
Claude Code · Codex
Everyday workflow
Obsidian · Raycast

Past life

  • Senior security engineerLandry’s
  • Cybersecurity instructional specialistRice University
  • Research assistant to Prof. Gregory NagyCenter for Hellenic Studies
  • TaLK ScholarIksan, South Korea
  • 2010 U.S. Census enumerator
  • ChoristerSt. Martin’s Episcopal Church
  • Classics majorColumbia University

    Staff writer for the Columbia Daily Spectator

Words I return to

Before you can play, you have to learn to want to play.

— Claudio Arrau

05 / Contact

Found a strange boundary?

richeeta@proton.me

Research collaboration, security work, or speaking.