Prompt-Injection on Aleph Beth https://www.alephbeth.ai/tags/prompt-injection/ Recent content in Prompt-Injection on Aleph Beth Aleph Beth https://www.alephbeth.ai/og-image.jpg https://www.alephbeth.ai/og-image.jpg Hugo en-US Mon, 14 Sep 2026 00:00:00 +0000 When the Web Becomes a Weapon: Understanding Attacks Against AI Agents https://www.alephbeth.ai/posts/2026-09-14-when-the-web-becomes-a-weapon-attacks-on-ai-agents/ Mon, 14 Sep 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-09-14-when-the-web-becomes-a-weapon-attacks-on-ai-agents/ All it takes to hijack an AI agent is for it to visit a web page carrying invisible instructions. This article walks through the full attack chain — indirect prompt injection observed in the wild, persistence through memory and RAG poisoning, state-level redirection of agent searches — then turns the weapon around: reverse-injection honeypots, tarpits and trap functions that expose attacking agents. The Hidden Weapon in the Page https://www.alephbeth.ai/posts/2026-09-13-hidden-weapon-in-the-page/ Sun, 13 Sep 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-09-13-hidden-weapon-in-the-page/ An indexed web page can carry a natural-language payload that targets, in a few lines, all four defensive layers of an AI agent: evasion, persistence, exfiltration, concealment. Worse, the outbound channel used for exfiltration is bidirectional: behind the URL, an attacker talks to the agent in real time. This article details the mechanism, shows why warning the model is a necessary but never sufficient first line, and why security comes from architecture — not from the prompt. Deceive, Detect, Exhaust: Defending a System Against Offensive AI Agents https://www.alephbeth.ai/posts/2026-07-29-deceive-detect-exhaust-defending-against-offensive-ai-agents/ Wed, 29 Jul 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-07-29-deceive-detect-exhaust-defending-against-offensive-ai-agents/ A human pentester gets tired, breaks for lunch, eventually gives up. An LLM-driven agent does none of that: it loops around the clock, draws no salary, and costs less every year. Against that adversary two mechanisms combine — decoys written for a reader that is a machine, and a maze of virtual machines that turns every hour of attack into pure expenditure. This article details both, and the four limits to state before any deployment. The Instruction That Protects Nothing: Why Prompt Position and Fine-Tuning Never Validate an LLM https://www.alephbeth.ai/posts/2026-06-29-prompt-position-fine-tuning-never-validate/ Mon, 29 Jun 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-06-29-prompt-position-fine-tuning-never-validate/ A stubborn intuition holds that you only need to put the safety rules ‘first’ in the system prompt. It is false, and for a reason that turns against it: a transformer grants no authority to a token’s position. Fine-tuning fails exactly the same test. Neither is an access control — both live inside the very thing they claim to constrain. The only guarantee is deterministic and external, and a rigorous dataset must reflect that boundary in its labels. When AI Takes Action: Understanding Attacks on Autonomous Agents, and How to Defend Against Them https://www.alephbeth.ai/posts/2026-06-29-ai-agent-security-jailbreak-countermeasures/ Mon, 29 Jun 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-06-29-ai-agent-security-jailbreak-countermeasures/ A chatbot writes sentences; an AI agent acts — it reads your email, runs code, calls APIs, spends money. That shift moves the risk: it is no longer about making the AI say something forbidden, but about making it do something dangerous. This article explains, with detailed and accessible examples, how these attacks actually work, why naive guardrails fail, and what a decision-maker must demand before putting an agent into production. When the Guards Are Agents Too: The Recursive Corruption of Control Systems https://www.alephbeth.ai/posts/2026-06-30-recursive-corruption-of-ai-control-systems/ Mon, 29 Jun 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-06-30-recursive-corruption-of-ai-control-systems/ Classic security tools hunt for dangerous words: ‘hack’, ‘bomb’, ‘urgent’. But you don’t subvert an AI agent with suspicious vocabulary — you subvert it with the ordinary language of the business: a role, a process, a plausible emergency. And when the agent that monitors, the SIEM that correlates and the auditor that checks are themselves AI agents, the attacker no longer has to defeat a system: it corrupts them in a chain. This article explains that recursive-corruption mechanism and what a decision-maker must demand to break it. The AI War on Our Networks: Why Attack Outpaces Defense https://www.alephbeth.ai/posts/2026-06-12-ai-war-on-our-networks-why-attack-outpaces-defense/ Fri, 12 Jun 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-06-12-ai-war-on-our-networks-why-attack-outpaces-defense/ Strategic essay. Cyber conflict is now machine-versus-machine, at a tempo that excludes the human operator. Attack holds the advantage — by architecture, not by accident: defending one LLM with another reproduces the very flaw. The way out is to move the decision out of the model, into a deterministic layer. The Agentic SOC — and the Attacks Against Defensive AI Agents https://www.alephbeth.ai/posts/2026-06-10-agentic-soc-attacks-on-defensive-ai/ Wed, 10 Jun 2026 00:00:00 +0000 https://www.alephbeth.ai/posts/2026-06-10-agentic-soc-attacks-on-defensive-ai/ Two linked shifts: the SOC moves from a human craft model to an automated agentic one — and those same defensive agents become a new attack surface. The defense you deploy is also the breach you open.