What It Is, Not What It Says: Securing Agentic Browsing Interactions with Web Semantics

Proposes Intact, a web agent defense architecture that leverages browser origin and structural semantics through GenTree to isolate untrusted web elements and block visual prompt injection attacks during autonomous web browsing.

• SPIDES: Information-Flow Control for Browser Agents
  October 16, 2026 · arXiv
• BrowseSafe++: Benchmarking Prompt Injection Detection Across Web Contexts, Languages, and Browser Views
  October 12, 2026 · arXiv
• AdvSim2Real : Training Web Agents Against Adaptive Prompt Injection in a Web World Model
  October 6, 2026 · arXiv
• The Verifiable Action Card: Trustworthy Human-in-the-Loop Control for Secure Autonomous Agents
  September 16, 2026 · arXiv
• Beyond the Verdict: Evidence-Aligned Evaluation of Visual Prompt-Injection Guardrails
  September 2, 2026 · arXiv
• WebMCP-Phalanx: Enforcing and Characterizing Trust Boundaries for Browser-Integrated LLM Agents
  August 25, 2026 · arXiv
• WebSentinel: Detecting and Localizing Prompt Injection Attacks for Web Agents
  February 3, 2026 · arXiv
• WebInject: Prompt Injection Attack to Web Agents
  May 16, 2025 · EMNLP 2025 (Poster)
• WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks
  April 22, 2025 · NeurIPS 2025 (Poster)
• MobileInject: Evaluating Reasoning-to-Action Security of MLLM-Based Mobile Agents under Cross-Modal Consistency Injection
  October 16, 2026 · arXiv
• MMA-SafetyBench: A Benchmark for Multimodal Agent Safety Evaluation
  October 14, 2026 · arXiv
• AgentHijack: Visual Patch Attacks on Multimodal Computer-Use Agents
  September 6, 2026 · arXiv
• SIR: Self-improving Red-teaming for Compute Use Agents
  August 31, 2026 · arXiv
• SkillLifeBench: Benchmarking Security Across the Lifecycle of Agent Skills
  October 26, 2026 · arXiv
• Step-Aligned Script Generation with Verification and Recovery for Web Automation Testing
  October 19, 2026 · arXiv
• Why Generate a Click? Plug-in Decision Heads for Web Agents
  October 14, 2026 · arXiv
• Teaching Agents in their Own Style: Blackbox Teacher Distillation for Web Agents
  October 14, 2026 · arXiv
• Towards Safe Autonomy for Computer Use
  October 13, 2026 · arXiv
• PrivacyGuard: Source-Linked Sanitization and Locally Resolvable PII References for Cloud GUI Agents
  October 12, 2026 · arXiv
• The Agent Clicks Approve: Injected Page Text Makes Browser Agents Authorize Access the Task Never Named
  October 10, 2026 · arXiv
• Secure-CUA: Controlling Untrusted Influence in Computer-Use Agents
  October 7, 2026 · arXiv
• Securing Computer-Use Agents Against Branch Steering Attacks
  October 2, 2026 · NeurIPS 2026 Workshop on Agents in the Wild
• AgentBreaker: Evaluating Context-Aware Indirect Prompt Injection Risks in Modern Web Agents
  October 1, 2026 · ISSTA 2026
• AutoTailor: Automatic, User-Aligned Capability Selection and Adaptation for Web Agents
  September 11, 2026 · arXiv