Secure-CUA: Controlling Untrusted Influence in Computer-Use Agents

Introduces Secure-CUA, a security framework that isolates untrusted interface content from computer-use agent planning across desktop, web, and mobile environments. By enforcing information-flow constraints on UI elements and restricting actions derived from untrusted inputs, Secure-CUA prevents indirect prompt injection while preserving legitimate automation capabilities.

• Towards Safe Autonomy for Computer Use
  October 13, 2026 · arXiv
• PrivacyGuard: Source-Linked Sanitization and Locally Resolvable PII References for Cloud GUI Agents
  October 12, 2026 · arXiv
• Interaction-as-a-Judge
  October 13, 2026 · arXiv
• PlaySuite: A Large-Scale Benchmark for Interactive Visual Intelligence
  October 5, 2026 · arXiv
• RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments
  May 28, 2025 · ICLR 2026 (Oral)
• sudo rm -rf agentic_security
  March 26, 2025 · ACL 2025 Industry Track
• In-Context Defense in Computer Agents: An Empirical Study
  March 12, 2025 · arXiv
• What Does "Now" Mean to Your Computer-Use Agent? Stale Screenshots, Page Loads, and Which Check to Run Before a Click
  October 29, 2026 · arXiv
• SkillLifeBench: Benchmarking Security Across the Lifecycle of Agent Skills
  October 26, 2026 · arXiv
• CUA-Recovery: Benchmarking Error Recovery in Long-Horizon Computer-Use Agents
  October 20, 2026 · arXiv
• SPIDES: Information-Flow Control for Browser Agents
  October 16, 2026 · arXiv
• MobileJailBench: Red Queen Jailbreak Benchmarking for Mobile Agents
  October 16, 2026 · arXiv
• MobileInject: Evaluating Reasoning-to-Action Security of MLLM-Based Mobile Agents under Cross-Modal Consistency Injection
  October 16, 2026 · arXiv
• What It Is, Not What It Says: Securing Agentic Browsing Interactions with Web Semantics
  October 15, 2026 · arXiv
• Learning How to Remember: Memory Modality Selection for GUI Agents
  October 13, 2026 · arXiv
• Adaptive-Group Process Rewards for GUI Agents
  October 13, 2026 · arXiv
• BrowseSafe++: Benchmarking Prompt Injection Detection Across Web Contexts, Languages, and Browser Views
  October 12, 2026 · arXiv
• The Agent Clicks Approve: Injected Page Text Makes Browser Agents Authorize Access the Task Never Named
  October 10, 2026 · arXiv
• Latent World Action Model for GUI Agents
  October 9, 2026 · arXiv
• SoftwareGym: Scaling Computer-Use Agent Training with Diverse Synthesized Software Environments
  October 8, 2026 · arXiv
• Right Screen, Wrong Transition: World Models as Verifiers for GUI Agents
  October 8, 2026 · arXiv
• AdvSim2Real : Training Web Agents Against Adaptive Prompt Injection in a Web World Model
  October 6, 2026 · arXiv
• Imagine to Act: High-Fidelity Data Synthesis via Image Editing World Model for Scalable GUI Agent Training
  October 5, 2026 · arXiv
• Securing Computer-Use Agents Against Branch Steering Attacks
  October 2, 2026 · NeurIPS 2026 Workshop on Agents in the Wild