AI agent finds 21 zero-days in FFmpeg; Chrome patches 429 bugs

Created at 5 Jun · 19:35 UTC4 sources↑ Market-relevant4 events

IN SHORT

An autonomous AI agent discovered 21 zero-day vulnerabilities in FFmpeg, an open-source media library, with the discovery costing approximately $1,000 in compute. Some of these bugs had existed for over two decades. This news follows Google's release of a Chrome update that patched a record 429 bugs.

Key Numbers

21zero-day vulnerabilities found in FFmpeg

$1,000compute cost for AI agent's FFmpeg vulnerability discovery

20 yearsmaximum age of FFmpeg vulnerabilities discovered

429bugs patched in recent Chrome update

Who's Involved

depthfirst

security startup that developed the AI agent

Google

shipped Chrome update patching numerous bugs

Key facts

An autonomous AI agent found 21 zero-day vulnerabilities in FFmpeg.
The security startup depthfirst stated the AI run cost about $1,000 in compute.
Some FFmpeg vulnerabilities had been present for over 20 years.
Google recently patched a record 429 bugs in Chrome.

A security startup named depthfirst has reported that its autonomous AI agent identified 21 previously unknown vulnerabilities within FFmpeg, the widely used open-source media library. The company stated that the computational cost for this discovery was approximately $1,000. Notably, some of these vulnerabilities had remained undetected in the FFmpeg codebase for over two decades. This development comes shortly after Google released a significant update for its Chrome browser, which addressed a record number of 429 bugs.

↳ Why This Matters

The discovery highlights the increasing capability of AI agents in identifying complex software vulnerabilities, potentially accelerating security patching efforts but also raising concerns about the accessibility of such tools for malicious actors. The sheer number of bugs patched in Chrome also underscores the ongoing challenges in maintaining software security.

Key facts

An autonomous AI agent found 21 zero-day vulnerabilities in FFmpeg.

The security startup depthfirst stated the AI run cost about $1,000 in compute.

Some FFmpeg vulnerabilities had been present for over 20 years.

Google recently patched a record 429 bugs in Chrome.

AI agent finds 21 zero-days in FFmpeg; Chrome patches 429 bugs

PiQ Daily

Key facts

AI agent finds 21 zero-days in FFmpeg; Chrome patches 429 bugs

PiQ Daily

Key facts

Get the newsletter.