GhostWriter attack poisons AI memory systems

Researchers from New Mexico State University demonstrated GhostWriter, an attack that secretly plants false memories into AI agents through hidden prompts. The attack achieved a 98% memory injection success rate and a 60% activation rate against state-of-the-art AI agents. The team proposed a defensive framework called Agentic Memory Sentry (AM-Sentry) to reduce the attack's success rate.