AI agents now operate across enterprise systems, creating new risk via prompt injection, plugins, and persistent memory. Here ...