Memory poisoning
8 incidentsRelated#Data exfiltration#Malware#Cybersecurity#Prompt injection#Vulnerability disclosure
Misbehavior · embracethered.com · Copirate 365: A Poisoned Word Doc Turned Microsoft's Copilot Against Its Own UserMemory on by default, audit logs off by default. Trust No AI, and assume the chatbot will read whatever you hand it.
Misbehavior · embracethered.com · Claude Opus 4.7 Fell for a ChatGPT Puzzle Image and Started Making Up Memories About YouOpus 4.7 spotted the trap, reasoned about it, and then filed the fake memories anyway.
Misbehavior · embracethered.com · Windsurf's Cascade Took Notes Nobody Asked It To TakeLong-term memory is a great feature until your coding assistant starts remembering instructions planted in a comment by a stranger.
Misbehavior · embracethered.com · Gemini's Memory Gets Gaslit by a Document It Was Only Asked to SummarizeAsked for a summary, Gemini instead filed a flat-earth claim under your personal details.
Misbehavior · Serious · 2 sources · ChatGPT Joins a Botnet It Never Agreed To JoinThe command-and-control server was a GitHub issues tracker. Free hosting, and the memory feature did the rest.
Misbehavior · embracethered.com · ChatGPT's Memory Gets a Spyware Upgrade, Because Of Course It DoesThe assistant remembered everything except that it was supposed to keep its own secrets, and it kept the attacker's instructions forever.
Misbehavior · embracethered.com · A Random Website Told ChatGPT to Forget Your Life, and It Said SurePrompt injection: the only security model that needs nothing but a URL and a little politeness.
Misbehavior · embracethered.com · ChatGPT's memory gets gaslit by a Google Doc and starts taking notes nobody asked forOpenAI filed it under model safety. Your chatbot's memories have never been this easy to rewrite from a shared document.