[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-poisoned-ai-memories-slip-past-screening-and-trust-filters":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},5822,"poisoned-ai-memories-slip-past-screening-and-trust-filters","Poisoned AI Memories Slip Past Screening and Trust Filters","A new study finds that screening and source-trust filters both fail to stop false memories from poisoning AI chatbots, cutting accuracy from 85% to 30%.","AI agents that remember past conversations can be broken by a single false sentence slipped into their memory, and the two leading defenses against it don't work.\n\nA new study tested agents built on LongMemEval, a benchmark for long-term conversational memory, by inserting plainly worded false statements into just 1.2 percent of the memory corpus. No hidden triggers, no adversarial optimization, no special prompt engineering. That alone was enough to crash answer accuracy from 85 percent down to 30 percent. The researchers then ran a four-stage filter designed to catch this kind of poisoning at write time; it correctly flagged 83.2 percent of deliberate prompt-injection attempts, yet missed all 360 poisoned memories used in the test, while still wrongly flagging 1.5 percent of harmless text that happened to contain trigger words.\n\nThe paper's real argument is that scanning text for suspicious content cannot tell a lie from the truth, since a well-written false claim reads exactly like a true one. A second defense, weighting retrieved memories by how trustworthy their source is, fared no better: the standard trust weighting made no statistically measurable difference (p=0.80), and turning it up high enough to block poisoned entries also blocked legitimate information whenever it came from a source the system hadn't already marked as trusted.\n\nPersistent memory has been marketed as the feature that finally makes AI assistants feel less forgetful. This research treats it as what it currently is: an unguarded place to store a lie that the system will later repeat back to you with total confidence.","[\"ai agents\",\"memory poisoning\",\"prompt injection\",\"ai security\"]","2026-08-24T04:00:00.000Z","2026-08-24T06:45:11.606Z","2026-08-24T06:45:23.535Z","published",null,[],"security",[26,27,28,29],"ai agents","memory poisoning","prompt injection","ai security",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2608.21230",0,{"sections":36},[37,42,45,50,55,60,65,70,75,80,85,90,95,100],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",3325,"2026-08-24T09:09:31.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":18},"Security",461,{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",218,"2026-08-23T19:30:00.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",145,"2026-08-22T21:25:33.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Science","science",91,"2026-08-20T10:01:48.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Startups","startups",50,"2026-08-22T16:23:09.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]