Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite […]