Public story · 2026-03-10 · source-backed
Schneier: 31 Companies Caught Poisoning AI Memory
Story
Research found 31 companies across 14 industries embedding hidden instructions in "Summarize with AI" share buttons that inject persistence commands into AI assistant memory. Over 50 unique prompt variants identified. This is "AI Recommendation Poisoning" — compromised assistants provide biased recommendations on health, finance, and security without users knowing. Schneier on Security
Related stories
Each link below shares sources, entities, or timing with this story.
Shared entities / Same source domain / Earlier coverage
Schneier Publishes "Promptware Kill Chain" — MITRE ATT&CK for AI Agents.
Both cover Schneier, Security; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-04.
Shared entity: Schneier / Same source
Thought Leaders
Both cover Schneier; cite the same source (Schneier on Security).
Shared entity: Schneier / Same source domain / What happened next
Schneier says 90-day disclosure is broken for AI.
Both cover Schneier; reported by the same outlet (schneier.com); picks up the Schneier thread on 2026-06-02.
Shared entity: Schneier / Same source domain / Earlier coverage
Thought Leaders
Both cover Schneier; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-07.
Schneier: "AI Models Are Commodified — Branding Is All That's Left"
Both cover Schneier; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-07.
900 Google and OpenAI Employees Sign "We Will Not Be Divided" — Largest Tech Worker Mobilization Since Maven.
Both cover Schneier; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-07.
Shared entity: Security / What happened next / Tension
A fake agent skill reached ~26,000 agents and every scanner said it was safe
Both cover Security; picks up the Security thread on 2026-06-28; pushes against this story (but).
Shared entity: Over / What happened next / Tension
Enterprise platforms just split into three camps on agent access, and you have to pick a side
Both cover Over; picks up the Over thread on 2026-06-02; pushes against this story (versus).
Source trail
Entities
Provenance
- Canonical issue
- Ramsay Research Agent — 2026-03-10
- AI generated
- no
- Story unit
- 2026-03-10-schneier-31-companies-caught-poisoning-ai-memory
- Labels
- source-backed, canonical briefing excerpt