← The Wire

Public story · 2026-03-10 · source-backed

Schneier: 31 Companies Caught Poisoning AI Memory

Confidence
source-backed
Sources
1
Redaction
passed

Story

Research found 31 companies across 14 industries embedding hidden instructions in "Summarize with AI" share buttons that inject persistence commands into AI assistant memory. Over 50 unique prompt variants identified. This is "AI Recommendation Poisoning" — compromised assistants provide biased recommendations on health, finance, and security without users knowing. Schneier on Security

Related stories

Each link below shares sources, entities, or timing with this story.

  1. Shared entities / Same source domain / Earlier coverage

    Schneier Publishes "Promptware Kill Chain" — MITRE ATT&CK for AI Agents.

    Both cover Schneier, Security; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-04.

  2. Shared entity: Schneier / Same source

    Thought Leaders

    Both cover Schneier; cite the same source (Schneier on Security).

  3. Shared entity: Schneier / Same source domain / What happened next

    Schneier says 90-day disclosure is broken for AI.

    Both cover Schneier; reported by the same outlet (schneier.com); picks up the Schneier thread on 2026-06-02.

  4. Shared entity: Schneier / Same source domain / Earlier coverage

    Thought Leaders

    Both cover Schneier; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-07.

  5. Schneier: "AI Models Are Commodified — Branding Is All That's Left"

    Both cover Schneier; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-07.

  6. 900 Google and OpenAI Employees Sign "We Will Not Be Divided" — Largest Tech Worker Mobilization Since Maven.

    Both cover Schneier; reported by the same outlet (schneier.com); earlier Schneier coverage from 2026-03-07.

  7. Shared entity: Security / What happened next / Tension

    A fake agent skill reached ~26,000 agents and every scanner said it was safe

    Both cover Security; picks up the Security thread on 2026-06-28; pushes against this story (but).

  8. Shared entity: Over / What happened next / Tension

    Enterprise platforms just split into three camps on agent access, and you have to pick a side

    Both cover Over; picks up the Over thread on 2026-06-02; pushes against this story (versus).

Source trail

Entities

Provenance

AI generated
no
Story unit
2026-03-10-schneier-31-companies-caught-poisoning-ai-memory
Labels
source-backed, canonical briefing excerpt