Google's Gemini 3.8 Flash Cyber found a critical flaw in 2 hours. Months of work compressed.