From LLM to agentic AI: prompt injection got worse

How the shift from single-model LLM integrations to agentic AI systems amplifies prompt injection into a multi-step attack chain.