One‑email MemGhost Attack Poisones AI Assistants’ Persistent Memory
Researchers show that a single crafted email can force a persistent AI assistant to silently store false information, altering its future replies and actions. Their MemGhost tool automates the payload, achieving up to 87% success on popular agents, exposing a new vector for long‑term compromise of personal AI agents.