Depthfirst turns FFmpeg into a proof point for autonomous security agents
The AI security startup says its agent found 21 FFmpeg zero-days for about $1,000, including an RCE exploit primitive.
By Ryan Merket · Published
Primary source: depthfirst
Why it matters
Depthfirst is showing that the scarce resource in AI security may no longer be vulnerability discovery alone, but validated triage, responsible disclosure and patch capacity.
Depthfirst has published one of the clearer tests yet of its core bet: autonomous security agents will be judged not by how many warnings they produce, but by whether they can prove exploitable bugs in code that has already been attacked for decades.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.