<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Agentic-Security on Aleph Beth</title>
    <link>https://www.alephbeth.ai/tags/agentic-security/</link>
    <description>Recent content in Agentic-Security on Aleph Beth</description>
    <image>
      <title>Aleph Beth</title>
      <url>https://www.alephbeth.ai/og-image.jpg</url>
      <link>https://www.alephbeth.ai/og-image.jpg</link>
    </image>
    <generator>Hugo</generator>
    <language>en-US</language>
    <lastBuildDate>Sun, 13 Sep 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://www.alephbeth.ai/tags/agentic-security/rss.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>The Hidden Weapon in the Page</title>
      <link>https://www.alephbeth.ai/posts/2026-09-13-hidden-weapon-in-the-page/</link>
      <pubDate>Sun, 13 Sep 2026 00:00:00 +0000</pubDate>
      <guid>https://www.alephbeth.ai/posts/2026-09-13-hidden-weapon-in-the-page/</guid>
      <description>An indexed web page can carry a natural-language payload that targets, in a few lines, all four defensive layers of an AI agent: evasion, persistence, exfiltration, concealment. Worse, the outbound channel used for exfiltration is bidirectional: behind the URL, an attacker talks to the agent in real time. This article details the mechanism, shows why warning the model is a necessary but never sufficient first line, and why security comes from architecture — not from the prompt.</description>
    </item>
    <item>
      <title>When AI Takes Action: Understanding Attacks on Autonomous Agents, and How to Defend Against Them</title>
      <link>https://www.alephbeth.ai/posts/2026-06-29-ai-agent-security-jailbreak-countermeasures/</link>
      <pubDate>Mon, 29 Jun 2026 00:00:00 +0000</pubDate>
      <guid>https://www.alephbeth.ai/posts/2026-06-29-ai-agent-security-jailbreak-countermeasures/</guid>
      <description>A chatbot writes sentences; an AI agent acts — it reads your email, runs code, calls APIs, spends money. That shift moves the risk: it is no longer about making the AI say something forbidden, but about making it do something dangerous. This article explains, with detailed and accessible examples, how these attacks actually work, why naive guardrails fail, and what a decision-maker must demand before putting an agent into production.</description>
    </item>
    <item>
      <title>When the Guards Are Agents Too: The Recursive Corruption of Control Systems</title>
      <link>https://www.alephbeth.ai/posts/2026-06-30-recursive-corruption-of-ai-control-systems/</link>
      <pubDate>Mon, 29 Jun 2026 00:00:00 +0000</pubDate>
      <guid>https://www.alephbeth.ai/posts/2026-06-30-recursive-corruption-of-ai-control-systems/</guid>
      <description>Classic security tools hunt for dangerous words: &amp;lsquo;hack&amp;rsquo;, &amp;lsquo;bomb&amp;rsquo;, &amp;lsquo;urgent&amp;rsquo;. But you don&amp;rsquo;t subvert an AI agent with suspicious vocabulary — you subvert it with the ordinary language of the business: a role, a process, a plausible emergency. And when the agent that monitors, the SIEM that correlates and the auditor that checks are themselves AI agents, the attacker no longer has to defeat a system: it corrupts them in a chain. This article explains that recursive-corruption mechanism and what a decision-maker must demand to break it.</description>
    </item>
  </channel>
</rss>
