PrivacyGuard: Source-Linked Sanitization and Locally Resolvable PII References for Cloud GUI Agents

Presents PrivacyGuard, a client-side privacy architecture for cloud-backed GUI agents that replaces personally identifiable information (PII) in instructions and screenshots with source-linked synthetic tokens. Using locally resolvable references, the agent completes tasks on remote cloud planners without leaking sensitive personal data.

• Secure-CUA: Controlling Untrusted Influence in Computer-Use Agents
  October 7, 2026 · arXiv
• WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks
  April 7, 2026 · arXiv
• Towards Safe Autonomy for Computer Use
  October 13, 2026 · arXiv
• RedTeamCUA: Realistic Adversarial Testing of Computer-Use Agents in Hybrid Web-OS Environments
  May 28, 2025 · ICLR 2026 (Oral)
• sudo rm -rf agentic_security
  March 26, 2025 · ACL 2025 Industry Track
• In-Context Defense in Computer Agents: An Empirical Study
  March 12, 2025 · arXiv
• SkillLifeBench: Benchmarking Security Across the Lifecycle of Agent Skills
  October 26, 2026 · arXiv
• SPIDES: Information-Flow Control for Browser Agents
  October 16, 2026 · arXiv
• MobileJailBench: Red Queen Jailbreak Benchmarking for Mobile Agents
  October 16, 2026 · arXiv
• MobileInject: Evaluating Reasoning-to-Action Security of MLLM-Based Mobile Agents under Cross-Modal Consistency Injection
  October 16, 2026 · arXiv
• What It Is, Not What It Says: Securing Agentic Browsing Interactions with Web Semantics
  October 15, 2026 · arXiv
• Learning How to Remember: Memory Modality Selection for GUI Agents
  October 13, 2026 · arXiv
• Adaptive-Group Process Rewards for GUI Agents
  October 13, 2026 · arXiv
• BrowseSafe++: Benchmarking Prompt Injection Detection Across Web Contexts, Languages, and Browser Views
  October 12, 2026 · arXiv
• The Agent Clicks Approve: Injected Page Text Makes Browser Agents Authorize Access the Task Never Named
  October 10, 2026 · arXiv
• Latent World Action Model for GUI Agents
  October 9, 2026 · arXiv
• Right Screen, Wrong Transition: World Models as Verifiers for GUI Agents
  October 8, 2026 · arXiv
• AdvSim2Real : Training Web Agents Against Adaptive Prompt Injection in a Web World Model
  October 6, 2026 · arXiv
• Imagine to Act: High-Fidelity Data Synthesis via Image Editing World Model for Scalable GUI Agent Training
  October 5, 2026 · arXiv
• Securing Computer-Use Agents Against Branch Steering Attacks
  October 2, 2026 · NeurIPS 2026 Workshop on Agents in the Wild
• AgentBreaker: Evaluating Context-Aware Indirect Prompt Injection Risks in Modern Web Agents
  October 1, 2026 · ISSTA 2026
• AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agents
  September 26, 2026 · arXiv
• MATE: Policy-Aware Security Auditing for Mobile Agents via Synthesis-Driven Trajectory Learning
  September 19, 2026 · USENIX Security 2026
• RecreationWorld: Scalable and Verifiable Environments for Hybrid Computer-Use Agents
  September 18, 2026 · arXiv