Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-18 · source-backed
The FARMA attack plants fabricated entries in an agent's reasoning memory claiming a safety step already ran (arXiv 2608.16032). SENTINEL, the defense shipped alongside FARMA, is evaded on the first try by asking an LLM to reword the forgery. The capability paradox is the part to sit with: 98-100% success on GPT-4o and GPT-4o-mini versus 44% on Llama-3.1-8B, because more capable agents follow reworded claims more faithfully. PoEM's fix is to stop inspecting memory entirely and keep an HMAC-chained ledger writable only by the trusted action layer. Attack success drops to 0% with 0% false positives in eight of nine cells, against SENTINEL wrongly blocking 33-50% of legitimate operations.
Each link below shares sources, entities, or timing with this story.
LLM uses OpenAI / Shared entity: GPT / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (LLM uses OpenAI); both cover GPT; reported by the same outlet (arxiv.org).
GPT competes with Claude / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (GPT competes with Claude); both cover GPT, LLM; reported by the same outlet (arxiv.org).
Meta released Llama / Shared entity: GPT / Shared topic / Earlier coverage
Linked by a graph relationship (Meta released Llama); both cover GPT; overlapping topics (action, against, agent, attack).
LLM uses OpenAI / Shared entity: GPT / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (LLM uses OpenAI); both cover GPT; reported by the same outlet (arxiv.org).
Linked by a graph relationship (LLM uses OpenAI); both cover GPT; reported by the same outlet (arxiv.org).
GPT competes with Claude / Shared entity: GPT / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (GPT competes with Claude); both cover GPT; reported by the same outlet (arxiv.org).
Simon Willison released LLM / Shared entity: LLM / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Simon Willison released LLM); both cover LLM; overlapping topics (agent, capability).
GPT competes with Claude / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (GPT competes with Claude); both cover GPT, LLM; reported by the same outlet (arxiv.org).