Researchers have demonstrated GhostWriter, a new attack that secretly injects false memories into AI agents, influencing future responses and autonomous actions.