{"total":18,"rows":[{"id":"2508.09123","title":"OpenCUA: Open Foundations for Computer-Use Agents","created":"2025-08-12","cited_by_count":160,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2506.00618","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","created":"2025-05-31","cited_by_count":35,"area":"mllm"},{"id":"2503.13962","title":"Survey of Adversarial Robustness in Multimodal Large Language Models","created":"2025-03-18","cited_by_count":16,"area":"mllm"},{"id":"2503.14504","title":"Aligning Multimodal LLM with Human Preference: A Survey","created":"2025-03-18","cited_by_count":13,"area":"mllm"},{"id":"2503.09241","title":"In-Context Defense in Computer Agents: An Empirical Study","created":"2025-03-12","cited_by_count":10,"area":"mllm"},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2508.13739","title":"Enhancing Targeted Adversarial Attacks on Large Vision-Language Models via Intermediate Projector","created":"2025-08-19","cited_by_count":5,"area":"mllm"},{"id":"2510.04257","title":"AgentTypo: Adaptive Typographic Prompt Injection Attacks against Black-box Multimodal Agents","created":"2025-10-05","cited_by_count":4,"area":"mllm"},{"id":"2603.27918","title":"Adversarial Attacks on Multimodal Large Language Models: A Comprehensive Survey","created":"2026-03-30","cited_by_count":4,"area":"mllm"},{"id":"2603.16960","title":"Adversarial attacks against Modern Vision-Language Models","created":"2026-03-17","cited_by_count":2,"area":"mllm"},{"id":"2506.21874","title":"On the Feasibility of Poisoning Text-to-Image AI Models via Adversarial Mislabeling","created":"2025-06-27","cited_by_count":1,"area":"mllm"},{"id":"2604.19844","title":"If you're waiting for a sign... that might not be it! Mitigating Trust Boundary Confusion from Visual Injections on Vision-Language Agentic Systems","created":"2026-04-21","cited_by_count":1,"area":"mllm"},{"id":"2510.03612","title":"Cross-Modal Content Optimization for Steering Web Agent Preferences","created":"2025-10-04","cited_by_count":0,"area":"mllm"},{"id":"2603.29418","title":"Covert Visual Prompt Injection against Commercial Multimodal Large Language Models","created":"2026-03-31","cited_by_count":0,"area":"mllm"},{"id":"2605.16090","title":"A Cross-Modal Prompt Injection Attack against Large Vision-Language Models with Image-Only Perturbation","created":"2026-05-15","cited_by_count":0,"area":"mllm"}],"next_cursor":null}