Postdoc, Chalmers University of Technology
1 paper at NeurIPS 2025
OS agents are vulnerable to Malicious Image Patches (MIPs) embedded in screenshots, enabling a novel attack that poses significant security risks.