Persistent memory in LLM agents widens privacy leakage over sessions
Instructing the agent not to state or presuppose attributes cut leakage near the no-memory level while keeping most quality gains.
5 stories, newest first · one card per story
Instructing the agent not to state or presuppose attributes cut leakage near the no-memory level while keeping most quality gains.
APM-Bench evaluates persistent memory for streaming video assistants across 104 multi-session trajectories.
Shared artifacts can carry adversarial prompts across LLM agents, infecting most of them within eight hops.
16-day multi-agent stress test finds no world fully resilient to prompt injection, misinformation, or memory exposure; adversarial content acted on 46 hours later.
Bruce Schneier highlights two papers: the CIMemories benchmark shows frontier LLMs leak memory attributes up to 69%, and an RL method reduces inappropriate disclosures.
Today 1.1K readers · 1.6K views · 1.2K reads · all time 159K views