Codex agents wrote every patch in OpenAI's company-wide security sprint across hundreds of systems.

OpenAI just published a case study and reference architecture called the "Defense Factory", describing how it used Codex and its cyber models in an internal code-red sprint

Basically, attackers can now run fleets of long-running agents on open-weight models, so defenders should convert security work into a continuous agent loop too.