arXiv AI
MEMORY Wins All: Indirect Bias Injection Attacks via Social Media Feeds
Read the original on arXiv AI →The Flow has not summarised this story yet — read it at arXiv AI.
Related stories
arXiv AI
Jul 9
When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents
arXiv:2607. 06595v1 Announce Type: cross Abstract: Personal AI agents powered by large language models can reason and act using available tools to access emails, manage calendars, and push code to remote repositories, all with minimal oversight.
arXiv AI
Jul 7
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents
arXiv:2607. 05189v1 Announce Type: cross Abstract: Persistent personal agents combine long-term memory with access to users' external environments, enabling personalized foreground assistance and proactive background execution.
arXiv Machine Learning
Jun 10
MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents
arXiv:2606. 10742v1 Announce Type: cross Abstract: External memory has become a core component of modern web agents, enabling long-horizon reasoning through the retrieval of past experiences.
arXiv AI
Jun 8
It's a TRAP! Task-Redirecting Agent Persuasion Benchmark for Web Agents
arXiv:2512. 23128v2 Announce Type: replace-cross Abstract: Web-based agents powered by large language models are increasingly used for tasks such as email management or professional networking.
arXiv AI
Jun 3
Inference Cost Attacks for Retrieval-Augmented Large Language Models
arXiv:2606. 02643v1 Announce Type: cross Abstract: Retrieval-Augmented Generation (RAG)-enhanced LLM systems, while powerful, introduce substantial inference costs due to the inclusion of an extra multi-stage pipeline that dynamically retrieves and synthesizes information from external knowledge sources.
arXiv AI
Jun 16
MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks
arXiv:2602. 09222v2 Announce Type: replace-cross Abstract: Large language model (LLM) based web agents are increasingly deployed to automate complex online tasks by directly interacting with web sites and performing actions on users' behalf.