OAIC 2026 / Full talk / 25:22
I Know What You Didn’t Fix Last Summer
Finding incomplete fixes and vulnerability variants with LLMs
Aaron Grattafiori · Member of Technical Staff, Umbriel
About the talk
Aaron Grattafiori of Umbriel explores how LLMs can uncover incomplete fixes and related bug variants by studying a target’s history. He walks through a practical pipeline for research, patch review, variant discovery, triage, and validation, with examples and lessons on cost and reliability.
Recorded at Offensive AI Con 2026. Includes Aaron’s updated post-conference slides.
Watch on YouTube ↗
The next wave of offensive AI