Fetching from the wire…
Security2026-06-14 · source-backed
For anyone running agents with long-lived memory, this is the defense to read. SMSR signs memory with HMAC-SHA256 plus randomized memory ablation and majority voting, dropping multi-session poisoning from 93–100% to 0% for unsigned injections and holding authenticated single-injection attacks to 8.0% (arXiv). It keeps 90% utility on clean queries across 3,150 trials in 15 enterprise scenarios. Persistent agent memory is a poisoning target the moment it's shared or multi-session, and signing the memory store is a concrete pattern you can adopt now.
Each link below shares sources, entities, or timing with this story.
Shared entity: Persistent / Same source domain / Shared topic / Earlier coverage
Both cover Persistent; reported by the same outlet (arxiv.org); overlapping topics (agent, memory).
Shared entity: Persistent / Same source domain / What happened next / Tension
Both cover Persistent; reported by the same outlet (arxiv.org); picks up the Persistent thread on 2026-07-31.
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (ablation, agent, clean, memory); pushes against this story (versus).
Same source domain / Shared topic / Downstream implication
Reported by the same outlet (arxiv.org); overlapping topics (agent, attack, memory); traces where this leads (downstream).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (agent, attack, injection); pushes against this story (against).
Same source domain / Shared topic / Downstream implication
Reported by the same outlet (arxiv.org); overlapping topics (agent, attack, memory); traces where this leads (which means).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (agent, concrete, memory); pushes against this story (versus).
Reported by the same outlet (arxiv.org); overlapping topics (agent, attack, memory); pushes against this story (against).