- Forcepoint X-Labs publishes threat model for persistent memory poisoning
- Hidden text on a webpage becomes a durable "fact" an agent retrieves and trusts in unrelated tasks weeks later
- It has already been demonstrated against products already in the market, including ChatGPT, Gemini, Claude and Microsoft 365 Copilot
New findings from Forcepoint's X-Labs outline an interesting scenario that could easily mimic real life: An AI assistant with browser access reads a webpage about travel disruption.