6 min read
Research A new research paper describes an automated attack that poisons an AI agent's durable memory through a single email, with success rates above 70% against current frontier models. The planted lie loads into every subsequent session until manually audited.