Can Agents Keep Secrets They Were Never Told? Benchmarking Latent Privacy Risks Across Sessions with MemJoin

Reported by arXiv cs.CR (Qishun Yang, Shu Yang, Difei Xu, Di Wang, Meng Ding)

Summary by Cyber Security News20 Oct 2026, 06:00 CET

About this summary. This is a short excerpt from the description that arXiv cs.CR published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://arxiv.org/abs/2610.24359

arXiv:2610.24359v1 Announce Type: new Abstract: To support sustained interactions and personalized assistance, agents use long-term memory to retain and combine user information across sessions. Reusing such memories can lead an agent to state a sensitive relation while completing an ordinary task that does not require it. The relation to protect and the combination of clues that reveal it may remain hidden at memory write time, when later records and tasks are still unknown.

Read the full article at arXiv cs.CR →

Source attribution: headline and facts are from arXiv cs.CR (arxiv.org). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

AU: Northern Territory Health backtracks on claim only five patients impacted by RDH privacy breach

Pricing Cross-Bank Context in Federated Anti-Money Laundering

Privately Clipping Heavy-Tailed Data

PrivacyEvalClaw: A Tool-Augmented Deliberative Agent for Auditing Privacy Leakage in LLM Jailbreak Responses

Privacy Commissioner of Canada to investigate data breach involving Crime Stoppers

Cyberattack on University of Copenhagen exposes data of 525,000 people