MemGhost attack plants persistent false memories in AI agents

A single email can trick an AI agent with memory into saving a false 'fact' about the user, which persists across sessions. The attack hides the change from the user and silently steers future agent responses.