Silent Patching: Harnessing LLMs to Detect Hidden Vulnerabilities

Discover a novel approach to software supply chain security in this 45-minute RSA Conference talk by Willem Delbare (CEO & CTO) and Mackenzie Jackson (Security Researcher) from Aikido Security. Learn how silent patching—the practice of fixing security vulnerabilities without disclosure—creates dangerous blind spots for security teams who rely on public vulnerability databases like CVE or NVD. Explore innovative techniques for leveraging artificial intelligence to scan public changelog data, enabling the identification of hundreds of previously hidden, silently patched vulnerabilities. Gain valuable insights into strengthening your security posture by uncovering these concealed threats that traditional vulnerability tracking methods miss.