Memory Heist: webpage poisons Claude memory to steal secrets

A researcher demonstrates how a malicious webpage can plant instructions in Claude's memory that later exfiltrate sensitive data like name, employer, and security answers. The attack works by injecting durable prompts into the AI's long-term memory, turning future conversations into an exfiltration channel.

Featured · Ayush Paul