Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 3 papers
Filter4

Attack type

Prompt injection3

Impact

Unauthorized actions16Data and privacy leaks3

System type

AI Agent6coding agent0web agent3

Attack surface / entry point

User input4Web pages and interfaces3Documents and messages3Tool and skill descriptions6Code repositories and dependencies3Distribution channels5

Layer

Application layer3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 261papers have no tags yet and are not included in filtered results.
Impact：Data and privacy leaksSystem type：coding agentSystem type：web agentAttack surface / entry point：Web pages and interfacesClear all

Another 261papers do not have category tags yet and are not included in filtered results.

  2. AttacksarXiv 2608.04741

    LoginTrap：针对 LLM Web Agent 的任务无关钓鱼式间接提示注入攻击

    提出 LoginTrap，以网页弹窗诱导 Web Agent 提交敏感信息

    arXiv
    2608.04741
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    GPT-4o, Gemini 3 Flash, Claude Sonnet 4 and others7

    Abstract揭示网络智能体在黑盒网页下的登录诱导风险，利用模糊测试生成话术并跨骨干和架构验证了隐私泄露威胁。

    Paper analysisRead analysis
  3. AttacksarXiv 2605.05509

    研究者提出面向 Agent 浏览器的 Web 威胁模型，梳理 20 类攻击并在 4 个模型上复现

    提出面向智能体浏览器的 Web 威胁模型并复现混淆攻击

    arXiv
    2605.05509
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    GPT-5, Claude-Sonnet-4.6, Kimi-k2p5 and others8
    Abstract作者提出面向智能体浏览器的 Web 威胁模型与攻击分类，测试显示传统混淆攻击可复现且能绕过现有防御。

    这篇论文研究了智能体浏览器在面临传统 Web 攻击者时的安全性问题，指出当前针对提示词注入的安全假设无法抵御基于正常 Web 交互模式的混淆攻击。

    Paper analysisRead analysis
You have reached the end