Prompt injection remains one of the biggest open security challenges for AI and LLM-powered systems in the enterprise. If you’ve been following my writing, you know I’ve explored how indirect injections, AI agents, and MCP servers multiply the surface area for these attacks. Each new agent or server is another potential entry point for malicious instructions to sneak past guardrails.