Back Thehackernews

AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

Thehackernews •[email protected] (The Hacker News) • June 6, 2026

Two things landed within days of each other this week. A security startup reported 21 previously unknown vulnerabilities in FFmpeg, the media library inside almost everything that touches video, all of them found by an autonomous AI agent.

The same week, Google shipped Chrome 149 with patches for 429 security bugs, the most ever in a single release.

Only the FFmpeg bugs were found by AI.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AI Discovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Vulnerabilities An AI agent from the startup Depthfirst identified 21 zero-day vulnerabilities in FFmpeg, a widely used media library, with some flaws dating back over 20 years. These vulnerabilities include critical heap and stack overflows affecting various video processing applications. Concurrently, Google released Chrome 149, addressing a record 429 security bugs, with 22 classified as critical. The most severe bug, CVE-2026-10881, allows code execution outside Chrome's sandbox and scored 9.6 on the CVSS scale. The rapid discovery of vulnerabilities by AI tools highlights a growing challenge for security teams to manage the influx of reports. Depthfirst's AI agent achieved this at a cost of approximately $1,000, significantly lower than traditional methods. The situation indicates a shift in the cybersecurity landscape, where AI is outpacing human efforts in vulnerability discovery. 4 sources 71

AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

The full story

Extracted Entities

Attack Types (1)

Tools (2)