An autonomous security agent from depthfirst, following intensive analysis by Google and Anthropic, discovered 21 zero-day vulnerabilities in FFmpeg, including several flaws that had remained latent for up to two decades. Operating at a fraction of traditional costs, the agent generated reproducible proof-of-concept inputs to confirm the vulnerabilities. Researchers also demonstrated a remote code execution exploit primitive based on the newly discovered flaws.