https://www.alephbeth.ai/tags/indirect-injection/ Recent content in Indirect-Injection on Aleph Beth https://www.alephbeth.ai/og-image.jpg https://www.alephbeth.ai/og-image.jpg Hugo en-US Mon, 14 Sep 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-09-14-when-the-web-becomes-a-weapon-attacks-on-ai-agents/ Mon, 14 Sep 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-09-14-when-the-web-becomes-a-weapon-attacks-on-ai-agents/ All it takes to hijack an AI agent is for it to visit a web page carrying invisible instructions. This article walks through the full attack chain — indirect prompt injection observed in the wild, persistence through memory and RAG poisoning, state-level redirection of agent searches — then turns the weapon around: reverse-injection honeypots, tarpits and trap functions that expose attacking agents. https://www.alephbeth.ai/posts/2026-09-13-hidden-weapon-in-the-page/ Sun, 13 Sep 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-09-13-hidden-weapon-in-the-page/ An indexed web page can carry a natural-language payload that targets, in a few lines, all four defensive layers of an AI agent: evasion, persistence, exfiltration, concealment. Worse, the outbound channel used for exfiltration is bidirectional: behind the URL, an attacker talks to the agent in real time. This article details the mechanism, shows why warning the model is a necessary but never sufficient first line, and why security comes from architecture — not from the prompt.