Impressive if these pan out to be actual issues. Last time this sort of claim was made with mythos most of the issues were nothing burgers.
Not saying LLMs aren't pushing hard in security research right now, just that the tangibles seems to come largely from a knowledgeable person pushing an agent towards the find and not some autonomous process.