News Summary

• A security startup reported 21 previously unknown vulnerabilities in FFmpeg, the media library inside almost everything that touches video.
• The same week, Google shipped Chrome 149 with patches for 429 security bugs, the most ever in a single release.
• Google hasn't tied the 429 to AI; the on-record signal is the bounty overhaul it made in April.
• The response has to match the new pace: shorter patch cycles, auto-update wherever it exists, and dependency bumps that carry CVE fixes treated as security work.