2 papers
cs.CR2026
Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration
Debeshee Das, Julien Piet, Darya Kaviani +3
Memory systems enable otherwise-stateless LLM agents to persist user information across sessions, but also introduce a new attack surface. We characterize the Trojan Hippo attack,…
cs.CR2026
Opal: Private Memory for Personal AI
Darya Kaviani, Alp Eren Ozdarendeli, Jinhao Zhu +2
Personal AI systems increasingly retain long-term memory of user activity, including documents, emails, messages, meetings, and ambient recordings. Trusted hardware can keep this d…