Agent memory poisoning attack chain

An attacker hides malicious instructions in content an AI agent reads (indirect prompt injection) and then works them into the agent's logs (log-forging), so the bad instructions get absorbed into the long-term memory the agent relies on (AI memory poisoning of persistent agentic memory). Once poisoned, that memory quietly corrupts the agent's decisions long after the original content has gone.