Threat
Microsoft Warns of AI Agent Memory Poisoning | Information & Data Manager
Publication date unknown · Discovered idm.net.au
Page published
Publication date unknown · First observed: 7 Nov 2026
Coverage timeline
Single-source research — one report is available.
Why it matters
Agent memory poisoning can undermine human approval safeguards across sessions, making isolated memory write paths and model-independent policy enforcement important defensive controls.
Microsoft's red team observed poisoned AI-agent memory bypassing human approval controls, including an agent ignoring triggered approval prompts and using a stored policy to bypass approval. Attacker-controlled content, commonly delivered through email, can persist as trusted context across sessions and spread through shared memory.