Desktop automation is software-driven control of a computer’s interface, including apps, windows, menus, browser tabs, and forms. Instead of only sending text, an automated tool can click, type, read on-screen content, and move through workflows on a local machine or virtual desktop.
In cyber security, desktop automation matters because it expands the attack surface from data access to action execution. If an AI agent or macro can open files, approve prompts, or interact with internal systems, a malicious document, webpage, or connector may steer it into unsafe behavior. Defenders limit risk with least privilege, strong approval gates for sensitive actions, restricted app and file access, logging, and testing against prompt injection or deceptive UI states. Used carefully, desktop automation can also support defense tasks such as repetitive triage, evidence collection, and controlled administrative workflows.