Reports
AI-generated structured vendor updates
GhostApproval Vuln Exposes Systemic AI Coding Tool Flaw: Symlink Bypass in Human Review
Wiz Research discloses GhostApproval vulnerability affecting six major AI coding tools (Claude Code, Codex, Cursor, Amazon Q, Antigravity). Attackers use symlinks to bypass human review, achieving persistent remote access. The flaw reveals fundamental UI-level security gaps in Human-in-the-Loop mechanisms as agent permissions expand, requiring a redesign of confirmation workflows.
Google Antigravity 2.0 Replaces IDE with AI Agents, Forces Gemini CLI Migration
Google launches Antigravity 2.0, a revolutionary AI coding platform with desktop app, CLI, SDK, and Managed Agents API. It forces migration from Gemini CLI to Antigravity CLI, introduces Gemini Spark personal AI agent running on Google Cloud VM, and upgrades coding assistance from editor feature to software labor operating system.
Google Launches Gemini API Docs MCP & Agent Skills for AI Coding Agents
Google introduces Gemini API Docs MCP protocol and Agent Skills toolkit, enabling real-time access to updated API documentation and injecting best-practice patterns to resolve outdated code generation. Combined usage achieves 96.3% pass rate with 63% fewer tokens per correct answer.
OpenAI Partners with PNNL on Government Compliance AI Coding Benchmark
OpenAI partners with PNNL to launch DraftNEPABench, a benchmark evaluating AI coding agents' effectiveness in federal environmental permitting documentation. Focused on NEPA compliance, initial results show 15% time reduction in drafting.