Analysis on Aleph Beth https://www.alephbeth.ai/categories/analysis/ Recent content in Analysis on Aleph Beth Aleph Beth https://www.alephbeth.ai/og-image.jpg https://www.alephbeth.ai/og-image.jpg Hugo en-US Mon, 14 Sep 2026 00:00:00 +0000 When the Web Becomes a Weapon: Understanding Attacks Against AI Agents https://www.alephbeth.ai/posts/2026-09-14-when-the-web-becomes-a-weapon-attacks-on-ai-agents/ Mon, 14 Sep 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-09-14-when-the-web-becomes-a-weapon-attacks-on-ai-agents/ All it takes to hijack an AI agent is for it to visit a web page carrying invisible instructions. This article walks through the full attack chain — indirect prompt injection observed in the wild, persistence through memory and RAG poisoning, state-level redirection of agent searches — then turns the weapon around: reverse-injection honeypots, tarpits and trap functions that expose attacking agents. The Hidden Weapon in the Page https://www.alephbeth.ai/posts/2026-09-13-hidden-weapon-in-the-page/ Sun, 13 Sep 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-09-13-hidden-weapon-in-the-page/ An indexed web page can carry a natural-language payload that targets, in a few lines, all four defensive layers of an AI agent: evasion, persistence, exfiltration, concealment. Worse, the outbound channel used for exfiltration is bidirectional: behind the URL, an attacker talks to the agent in real time. This article details the mechanism, shows why warning the model is a necessary but never sufficient first line, and why security comes from architecture — not from the prompt. Conditional DPO Backdoors: From a Rare Context to an Agentic Chain https://www.alephbeth.ai/posts/2026-06-22-conditional-dpo-backdoor-agentic-chain/ Sun, 21 Jun 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-06-22-conditional-dpo-backdoor-agentic-chain/ A deeper companion to the free-tier feedback explainer. DPO moves safety from the behavior level to the level of a conditional distribution; an agent then turns a poisoned conditional into a chain of actions. The result is a backdoor built from individually ordinary behaviors, invisible to standard evaluations, whose danger only emerges when the actions compose. The Free-Tier Backdoor: Poisoning the Continuous Training of Commercial LLMs https://www.alephbeth.ai/posts/2026-06-21-free-tier-weak-link-data-poisoning/ Sun, 21 Jun 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-06-21-free-tier-weak-link-data-poisoning/ Commercial assistants — Claude, ChatGPT, Gemini, Le Chat — keep learning from free-tier feedback: ratings, regenerations, and the conversations themselves. That loop is an injection channel. A two-phase threat model: build a policy-compliant backdoor on a rare topic, then exploit it for jailbreak — and why scale makes the first phase almost impossible to catch. The War of AIs in Cyberspace: Agentic SIEMs as a New Attack Surface https://www.alephbeth.ai/posts/2026-06-18-agentic-siem-attack-surface/ Thu, 18 Jun 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-06-18-agentic-siem-attack-surface/ SOCs are evolving toward agentic architectures where multiple AIs handle triage, investigation, correlation, and response. The decision system itself becomes the target. We argue for capability monotonicity (Lock-Monotone/TGMC) as an architectural invariant that contains a compromised reasoning layer. The Agentic SOC — and the Attacks Against Defensive AI Agents https://www.alephbeth.ai/posts/2026-06-10-agentic-soc-attacks-on-defensive-ai/ Wed, 10 Jun 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-06-10-agentic-soc-attacks-on-defensive-ai/ Two linked shifts: the SOC moves from a human craft model to an automated agentic one — and those same defensive agents become a new attack surface. The defense you deploy is also the breach you open.