56,966 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a0875f-b7bb-7379-ba9c-ab82aaa5cd17

Memory poisoning in AI agents: exploits that wait

christian-schneider.net · published 26 February 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at christian-schneider.net Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 8
Words captured: 3,033

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Threat modeling agentic AI: a scenario-driven approach Read at the source ↗

christian-schneider.net

https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/

genai.owasp.org

When AI Remembers Too Much – Persistent Behaviors in Agents’ Memory Read at the source ↗

unit42.paloaltonetworks.com

https://arxiv.org/abs/2503.03704

arxiv.org

Hacking Gemini's Memory with Prompt Injection and Delayed Tool Invocation Read at the source ↗

embracethered.com

https://christian-schneider.net/images/blog/diagrams/persistent-memory-poisoning-in-ai-agents/defense-layers.svg

christian-schneider.net

https://arxiv.org/abs/2601.05504

arxiv.org

RAG security: the forgotten attack surface Read at the source ↗

christian-schneider.net