Memory and context poisoning: Don't let attackers rewrite your AI agent's memory

Prompt injection ends when the session closes. Memory poisoning persists across sessions, activates weeks later, and is nearly invisible to detect.