AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery Paper • 2505.21499 • Published May 27 • 2 • 2
