Depthfirst turns FFmpeg into a proof point for autonomous security agents

Depthfirst has published one of the clearer tests yet of its core bet: autonomous security agents will be judged not by how many warnings they produce, but by whether they can prove exploitable bugs in code that has already been attacked for decades. In a research post, depthfirst says its production security agent found 21 zero day vulnerabilities in FFmpeg, the open source multimedia framework that sits inside browser, streaming, surveillance, transcoding and media ingest pipelines. The com...