Agent Memory Poisoning: Attack Chain & Defenses