A security lab just found 21 zero-days in FFmpeg for about $1,000 of compute. Work that used to take a research team a year now costs less than a MacBook Pro, and it's the reason critical vulnerability reports across Apple, Microsoft, AWS, and Google went from under 100 a month to over 600 since spring. Those flaws were sitting in the code all along, some for a decade. What collapsed this spring was the price of finding them. Google's Big Sleep agent found 20 zero-days in open source projects…