{"list":"closest","total":56,"rows":[{"id":"2604.10577","title":"The Blind Spot of Agent Safety: How Benign User Instructions Expose Critical Vulnerabilities in Computer-Use Agents","created":"2026-04-12","cited_by_count":12},{"id":"2604.08005","title":"Preference Redirection via Attention Concentration: An Attack on Computer Use Agents","created":"2026-04-09","cited_by_count":3},{"id":"2604.07831","title":"Are GUI Agents Focused Enough? Automated Distraction via Semantic-level UI Element Injection","created":"2026-04-09","cited_by_count":1},{"id":"2604.06367","title":"WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks","created":"2026-04-07","cited_by_count":1},{"id":"2604.04759","title":"Your Agent, Their Asset: A Real-World Safety Analysis of OpenClaw","created":"2026-04-06","cited_by_count":20},{"id":"2603.23007","title":"AgentRAE: Remote Action Execution through Notification-based Visual Backdoors against Screenshots-based Mobile GUI Agents","created":"2026-03-24","cited_by_count":2},{"id":"2603.08316","title":"SlowBA: An efficiency backdoor attack towards VLM-based GUI agents","created":"2026-03-09","cited_by_count":3},{"id":"2603.04364","title":"Dual-Modality Multi-Stage Adversarial Safety Training: Robustifying Multimodal Web Agents Against Cross-Modal Attacks","created":"2026-03-04","cited_by_count":2},{"id":"2602.08995","title":"When Actions Go Off-Task: Detecting and Correcting Misaligned Actions in Computer-Use Agents","created":"2026-02-09","cited_by_count":8},{"id":"2602.08412","title":"From Assistant to Double Agent: Formalizing and Benchmarking Attacks on OpenClaw for Personalized Local AI Agent","created":"2026-02-09","cited_by_count":29},{"id":"2602.08235","title":"When Benign Inputs Lead to Severe Harms: Eliciting Unsafe Unintended Behaviors of Computer-Use Agents","created":"2026-02-09","cited_by_count":14},{"id":"2602.03792","title":"WebSentinel: Detecting and Localizing Prompt Injection Attacks for Web Agents","created":"2026-02-03","cited_by_count":11},{"id":"2602.03255","title":"LPS-Bench: Benchmarking Safety Awareness of Computer-Use Agents in Long-Horizon Planning under Benign and Adversarial Scenarios","created":"2026-02-03","cited_by_count":9},{"id":"2602.03100","title":"Risky-Bench: Probing Agentic Safety Risks under Real-World Deployment","created":"2026-02-03","cited_by_count":8},{"id":"2601.18491","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","created":"2026-01-26","cited_by_count":50},{"id":"2601.12822","title":"MirrorGuard: Toward Secure Computer-Use Agents via Simulation-to-Real Reasoning Correction","created":"2026-01-19","cited_by_count":5},{"id":"2601.12349","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","created":"2026-01-18","cited_by_count":6},{"id":"2601.09923","title":"CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents","created":"2026-01-14","cited_by_count":17},{"id":"2601.05293","title":"A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes","created":"2026-01-08","cited_by_count":22},{"id":"2512.23128","title":"It's a TRAP! Task-Redirecting Agent Persuasion Benchmark for Web Agents","created":"2025-12-29","cited_by_count":10},{"id":"2512.22894","title":"DECEPTICON: How Dark Patterns Manipulate Web Agents","created":"2025-12-28","cited_by_count":15},{"id":"2512.00966","title":"Mitigating Indirect Prompt Injection via Instruction-Following Intent Analysis","created":"2025-11-30","cited_by_count":9},{"id":"2511.20703","title":"PropensityBench: Evaluating Latent Safety Risks in Large Language Models via an Agentic Approach","created":"2025-11-24","cited_by_count":22},{"id":"2510.20333","title":"GhostEI-Bench: Do Mobile Agents Resilience to Environmental Injection in Dynamic On-Device Environments?","created":"2025-10-23","cited_by_count":12},{"id":"2510.18113","title":"Investigating the Impact of Dark Patterns on LLM-Based Web Agents","created":"2025-10-20","cited_by_count":17},{"id":"2510.15994","title":"MCP Security Bench (MSB): Benchmarking Attacks Against Model Context Protocol in LLM Agents","created":"2025-10-14","cited_by_count":42},{"id":"2510.12200","title":"HackWorld: Evaluating Computer-Use Agents on Exploiting Web Application Vulnerabilities","created":"2025-10-14","cited_by_count":2},{"id":"2510.05156","title":"VeriGuard: Enhancing LLM Agent Safety via Verified Code Generation","created":"2025-10-03","cited_by_count":49},{"id":"2510.01354","title":"WAInjectBench: Benchmarking Prompt Injection Detections for Web Agents","created":"2025-10-01","cited_by_count":24},{"id":"2509.22256","title":"Secure and Efficient Access Control for Computer-Use Agents via Context Space","created":"2025-09-26","cited_by_count":11},{"id":"2509.17488","title":"Privacy in Action: Towards Realistic Privacy Mitigation and Evaluation for LLM-Powered Agents","created":"2025-09-22","cited_by_count":36},{"id":"2509.11250","title":"Environmental Injection Attacks against GUI Agents in Realistic Dynamic Environments","created":"2025-09-14","cited_by_count":6},{"id":"2509.07764","title":"AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents","created":"2025-09-09","cited_by_count":27},{"id":"2508.00935","title":"Measuring Harmfulness of Computer-Using Agents","created":"2025-07-31","cited_by_count":8},{"id":"2507.05445","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","created":"2025-07-07","cited_by_count":11},{"id":"2506.14866","title":"OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents","created":"2025-06-17","cited_by_count":111},{"id":"2506.02456","title":"VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents","created":"2025-06-03","cited_by_count":45},{"id":"2506.00618","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","created":"2025-05-31","cited_by_count":35},{"id":"2505.21936","title":"RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments","created":"2025-05-28","cited_by_count":46},{"id":"2505.14418","title":"Hidden Ghost Hand: Unveiling Backdoor Vulnerabilities in MLLM-Powered Mobile GUI Agents","created":"2025-05-20","cited_by_count":13},{"id":"2505.11717","title":"WebInject: Prompt Injection Attack to Web Agents","created":"2025-05-16","cited_by_count":51},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23},{"id":"2504.18575","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","created":"2025-04-22","cited_by_count":157},{"id":"2504.03111","title":"Les Dissonances: Cross-Tool Harvesting and Polluting in Pool-of-Tools Empowered LLM Agents","created":"2025-04-04","cited_by_count":22},{"id":"2503.22738","title":"ShieldAgent: Shielding Agents via Verifiable Safety Policy Reasoning","created":"2025-03-26","cited_by_count":151},{"id":"2503.10809","title":"MIP against Agent: Malicious Image Patches Hijacking Multimodal OS Agents","created":"2025-03-13","cited_by_count":12},{"id":"2503.09780","title":"AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents","created":"2025-03-12","cited_by_count":82},{"id":"2503.09241","title":"In-Context Defense in Computer Agents: An Empirical Study","created":"2025-03-12","cited_by_count":10},{"id":"2502.13053","title":"Evaluating the Robustness of Multimodal Agents Against Active Environmental Injection Attacks","created":"2025-02-18","cited_by_count":22},{"id":"2410.07283","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","created":"2024-10-09","cited_by_count":133},{"id":"2410.06703","title":"ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents","created":"2024-10-09","cited_by_count":133},{"id":"2410.02644","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","created":"2024-10-03","cited_by_count":369},{"id":"2409.11295","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","created":"2024-09-17","cited_by_count":150},{"id":"2407.12784","title":"AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases","created":"2024-07-17","cited_by_count":429},{"id":"2403.02691","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","created":"2024-03-05","cited_by_count":538},{"id":"2311.11855","title":"Evil Geniuses: Delving into the Safety of LLM-based Agents","created":"2023-11-20","cited_by_count":106}],"next_cursor":null}