InjecMEM Attack on Agent Memory

InjecMEM and related poisoning analysis demonstrate temporal decoupling: web or document content can implant persistent instructions that activate later, potentially without direct memory access. Managed and device-resident memory patterns are expanding, but expiry, approval, deletion, isolation, provenance, retrieval quality, and poisoning resistance remain unresolved.