In a nutshell: An AI agent identified 21 zero-days in FFmpeg, while Chrome 149 sets a record with 429 patched vulnerabilities — a sign of growing attack surface discovery through automated analysis.
An autonomous AI agent has discovered 21 previously unknown vulnerabilities in FFmpeg — the visual media library widely deployed in video applications worldwide. In parallel, Google released Chrome 149 with patches for 429 security vulnerabilities, the highest number per release to date.
A security firm announced that an autonomous AI agent has uncovered 21 previously unknown vulnerabilities in FFmpeg, the media library used in nearly every application involving video processing. These vulnerabilities had not been previously identified by any security researcher.
In the same week, Google released Chrome 149 with security patches for a total of 429 bugs — the highest number of patched vulnerabilities in a single release. However, these did not primarily originate from AI-driven analysis.
For CISOs, the FFmpeg discovery is relevant because this library is widely deployed in video and media stacks ranging from enterprise applications to content distribution. Its broad deployment and complex code base require timely patches. The volume of Chrome patches simultaneously underscores the continuously expanding attack surface discovery through automated methods — an indicator of systematic vulnerability analysis that is placing further pressure on patch management in infrastructure.
Source: thehackernews.com · Published June 6, 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.6.5.