[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-attackers-can-forge-an-ai-agents-memory-of-its-own-reasoning":10,"sections":34},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},4008,"attackers-can-forge-an-ai-agents-memory-of-its-own-reasoning","Attackers Can Forge an AI Agent's Memory of Its Own Reasoning","A new attack called FARMA poisons the reasoning history of LLM agents, bypassing existing defenses — and researchers say a layered pipeline can stop it cold.","AI agents that remember how they think are now a target for memory poisoning.\n\nResearchers have documented an attack technique called FARMA — Forged Amplifying Rationale Memory Attack — that tampers with an LLM agent's stored reasoning traces rather than its factual knowledge. The attack plants fake reasoning histories using language crafted to slip past keyword-based filters, then reinforces those forgeries through self-referential loops that defeat consensus-based defenses. In lab trials across multiple agents and LLM models, FARMA hit a 100% success rate under baseline conditions and broke through two existing defense mechanisms.\n\nThis matters because the industry has spent considerable effort securing what AI agents *retrieve*, while largely ignoring the integrity of what they *remember about their own thinking*. An agent that trusts a poisoned reasoning history may make decisions that seem internally consistent while being systematically steered by an attacker — a harder problem to catch than a hallucinated fact.\n\nThe same paper proposes a defense called SENTINEL, a layered pipeline built around a \"Reasoning Guard\" that scores candidate memory entries on five weighted signals for signs of forgery. Across 326 benign agent traces, SENTINEL produced no false positives and pushed FARMA's success rate down to 0% in the best conditions. Those are lab numbers, which tend to look cleaner than production does — but the structural approach is worth watching as persistent-memory agents move from research demos into deployed products.","[\"ai\",\"security\",\"llm agents\",\"adversarial attacks\"]","2026-07-07T04:00:00.000Z","2026-07-07T14:40:26.478Z","2026-07-07T14:40:29.405Z","published",null,[],"security",[26,24,27,28],"ai","llm agents","adversarial attacks",[30],{"name":31,"url":32},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2607.05029",0,{"sections":35},[36,40,44,49,54,59,64,69,74,78,83,87,92,97],{"name":37,"slug":26,"count":38,"latest_published_at":39},"AI",2590,"2026-07-16T04:00:00.000Z",{"name":41,"slug":24,"count":42,"latest_published_at":43},"Security",294,"2026-07-15T19:59:48.000Z",{"name":45,"slug":46,"count":47,"latest_published_at":48},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":50,"slug":51,"count":52,"latest_published_at":53},"Policy","policy",158,"2026-07-16T00:02:48.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":58},"Hardware","hardware",122,"2026-07-14T19:46:26.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":63},"Consumer Tech","consumer-tech",93,"2026-07-13T13:20:48.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":68},"Software","software",70,"2026-07-13T19:52:25.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Science","science",66,"2026-07-10T10:29:37.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":18},"Dev Tools","dev-tools",59,{"name":79,"slug":80,"count":81,"latest_published_at":82},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":84,"slug":85,"count":81,"latest_published_at":86},"Startups","startups","2026-06-29T20:55:50.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"General","general",29,"2026-07-10T22:28:58.000Z",{"name":93,"slug":94,"count":95,"latest_published_at":96},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":98,"slug":99,"count":100,"latest_published_at":101},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]