arXiv AI
Jul 22
Broken Gates: Re-evaluating Web Bot Defenses in the Age of LLM Agents
arXiv:2607. 18659v1 Announce Type: cross Abstract: LLM-based browser agents are rapidly changing the threat landscape for web security.
Broken Gates: Re-evaluating Web Bot Defenses in the Age of LLM Agents
LLM-based browser agents are rapidly changing the threat landscape for web security. Unlike traditional automation frameworks that execute predefined scripts, these agents can autonomously navigate websites, reason about page content, and interact with web interfaces using natural-language instructions.
Related stories
arXiv AI
6d ago
BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents
arXiv:2511. 20597v2 Announce Type: replace-cross Abstract: The integration of artificial intelligence (AI) agents into web browsers introduces security challenges that go beyond traditional web application threat models.
arXiv AI
Jun 16
MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks
arXiv:2602. 09222v2 Announce Type: replace-cross Abstract: Large language model (LLM) based web agents are increasingly deployed to automate complex online tasks by directly interacting with web sites and performing actions on users' behalf.
arXiv AI
Jun 12
Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents
arXiv:2606. 13385v1 Announce Type: cross Abstract: Web agents driven by large language models (LLMs) are increasingly deployed in real-world environments, where they operate over untrusted web content and execute actions with direct consequences.
arXiv AI
Jun 18
WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks
arXiv:2604. 06367v2 Announce Type: replace-cross Abstract: Web agents automate browser tasks, ranging from simple form completion to complex workflows like ordering groceries.
arXiv AI
Jul 10
Prismata: Confining Cross-Site Prompt Injection in Web Agents
arXiv:2607. 08147v1 Announce Type: cross Abstract: Autonomous web agents promise to automate everyday browsing tasks, but inherit one of the web's oldest attack surfaces.
arXiv AI
Jul 29
Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response
arXiv:2607. 25379v1 Announce Type: new Abstract: Cyber-capable AI agents combine language models with tools, memory, and execution en- vironments to perform multi-step offensive-security tasks.
arXiv AI
Jun 2
HLL: Can Agents Cross Humanity's Last Line of Verification?
arXiv:2606. 02449v1 Announce Type: new Abstract: Multimodal agents are increasingly expected to operate interfaces on behalf of users, raising a central deployment question: can they truly substitute for humans in workflows that services deliberately protect against automation?
arXiv AI
Jun 12
PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections
arXiv:2606. 12737v1 Announce Type: cross Abstract: Large Language Models (LLMs) are rapidly evolving into agentic systems that interact with external tools and environments, introducing new security risks such as indirect prompt injection attacks through untrusted external sources.
arXiv AI
Jul 14
ANCHOR: Automated Alignment Auditing for CLI Agents on Real-World Harm
arXiv:2607. 10455v1 Announce Type: new Abstract: Autonomous CLI agents can now execute hundreds of actions across multi-hour sessions: writing code, executing shell commands, browsing the web, and managing cloud infrastructure, all with minimal human oversight.
arXiv AI
Jun 15
COGNITION: From Evaluation to Defense against Multimodal LLM CAPTCHA Solvers
arXiv:2512. 02318v4 Announce Type: replace-cross Abstract: This paper studies how multimodal large language models (MLLMs) undermine the security guarantees of visual CAPTCHA.
arXiv AI
Jun 8
It's a TRAP! Task-Redirecting Agent Persuasion Benchmark for Web Agents
arXiv:2512. 23128v2 Announce Type: replace-cross Abstract: Web-based agents powered by large language models are increasingly used for tasks such as email management or professional networking.