The study warns of security risks with control of “operating system agents” in computers and phones

“The operating system agents can independently complete the tasks and have the ability to enhance the lives of billions of users around the world significantly,” the researchers note. “Imagine a world in which these agents can perform smoothly by these agents,” imagine a world such as online shopping, booking travel arrangements and other daily activities. “

The most advanced systems can deal with the complex multi-stel-steering workflow that extends to different applications-reserve a restaurant reservation, then add it automatically to your calendar, then set a reminder to leave early for traffic. What took from humans minutes of clicking and writing can now happen in seconds, without human intervention.

Why do security experts appear warning devices on the systems of artificial intelligence companies?

For the leaders of institution technology, the promise of productive gains comes with a realistic fact: these systems represent a completely new surface of the attack that most organizations are not ready to defend.

The researchers devote great attention to what they are diplomatic.Safety and privacy“Fears, but the effects of the most anxious ways to suggest their academic language.” The operating system agents face these risks, especially given their wide applications on personal devices with user data, “they write.

They read the attacks they document, such as cybersecurity nightmare. “Unforgettable fast injection on the Internet“The malicious actors are allowed to include hidden instructions in the web pages that can kidnap the behavior of an artificial intelligence agent. Even more is“ environmental injection attacks ”where it seems that it seems that the agents seem to be stealing user’s data or conducting unauthorized procedures.

Consider the consequences: Artificial intelligence agent can be processed with access to companies e -mail, financial systems, and customer databases through a carefully made web page to penetrate sensitive information. Traditional safety models, built around human users who can detect clear hunting attempts, collapse when the “user” AI system treats information differently.

The survey reveals a gap in preparation. While public security frameworks are present for artificial intelligence agents, “studies on defenses for operating system factors are still limited.” This is not just an academic concern – it is an immediate challenge for any organization that is considering spreading these systems.

Reality exam

Despite the noise surrounding these systems, the scanning analysis of performance standards reveals great restrictions, with expectations to be widespread.

Success rates vary greatly through different tasks and platforms. Some commercial systems achieve success rates exceeding 50 % on certain criteria – impressive for emerging technology – but they are struggling with others. The researchers classify the assessment tasks into three types: “grounding the primary user interface” (understanding the facade elements), “retrieving information” (finding and extracting data), and “complex agents” (complex independent operations).

This style tells him: The current systems excel in simple and well -defined tasks, but they stumble when they face the complex type of workflow based on the context that defines many modern knowledge works. They can reliably click on a specific button or fill a standard model, but they struggle with tasks that require constant thinking or adaptation with unexpected interface changes.

This performance gap explains why early publishing operations focus on large task with large size instead of automating general purposes. Technology has not yet been ready to replace human rule in complex scenarios, but it is increasingly able to deal with routine digital business.

What happens when artificial intelligence agents learn to allocate themselves to each user

The most interesting challenge may include the transformation-specified in the survey what researchers call “allocation and self-development”. Unlike artificial intelligence assistants today who are not dealing with every interaction as independent, future operating system agents will need to learn from user reactions and adapt to individual preferences over time.

“The development of OS’s personal agents has been a long goal in artificial intelligence research,” the authors write. “It is expected that a personal assistant will be constantly adapting and providing improved experiences based on user’s individual preferences.”

This ability can mainly change how we interact with technology. Imagine Amnesty International’s agent who learns your email writing style, understands your calendar preferences, knows the restaurants you prefer, and can make increasingly advanced decisions on your behalf. Possible productivity gains are enormous, but also the effects of privacy.

Technical challenges are great. The survey indicates the need for better multimedia memory systems not only dealing with the text but images and sound, and providing “great challenges” for current technology. How do you build a system that remembers your preferences without creating a comprehensive monitoring record in your digital life?

For technology executives who evaluate these systems, this customization challenge is the largest chance and the largest danger. Organizations that are solved first will gain great competitive advantages, but the effects of privacy and security may be severe if they are treated poorly.

The race to build artificial intelligence assistants who can really work like human users intensify quickly. While the basic challenges about security, reliability and allocation remain unlawful, the path is clear. Researchers maintain developments tracking an open source warehouse depot, while admitting that “OS agents are still in their early stages of development” with “rapid developments that continue to provide new methodologies and applications.”

The question is not whether artificial intelligence agents will turn how we interact with computers – whether we will be ready for the consequences when doing this. The window of safety and privacy frameworks are narrowed properly at the speed of technology.

Daily visions about business use cases with VB daily

If you want to persuade your boss at work, you have covered VB Daily. We give you the internal journalistic precedence over what companies do with obstetric artificial intelligence, from organizational transformations to practical publishing operations, so that you can share visions of the maximum return on investment.

Read with us privacy policy

Thanks for subscribing. Check more VB news bulletins here.

An error occurred.