Aaron Grattafiori Explains How LLMs Hunt Patch Variants at Scale

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem x Offensive AI Con: Umbriel AI's Aaron Grattafiori breaks down the new offensive-security playbook, using LLMs for patch variant analysis, why the vuln apocalypse hasn't become an exploit apocalypse, and how the death of security through obscurity puts closed-source binaries and firmware within reach.

Plus, we discuss rogue agents escaping sandboxes, the eval-driven loop behind recursive self-improvement, and the brutal cost asymmetry that makes offense cheap and defense almost unaffordable.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Aaron Grattafiori.

Timestamps:

0:00 Introductory banter

1:12 Umbriel AI pitch: "Smart people in a place to cook”

3:08 Weird, exhausting, exciting time in security

4:00 What AI really changed: speed (and a 30-minute reimplementation)

6:36 Incomplete fixes and the variant-analysis pipeline

9:21 Uplifting, abstraction, and representing vulnerabilities

11:48 Experimentation and the new shape of security companies