GOOGLE ANTIGRAVITY EXFILTRATES DATA

Summary from the TLDR AI newsletter

Google's Antigravity coding tool can be manipulated through hidden instructions in poisoned web pages (aka prompt injection). A fake Oracle integration guide was used to trick Gemini into bypassing its own security settings, collect user credentials from protected files, and send the stolen data to an attacker-controlled website included in Antigravity's default allowed domains list.