When AI Agents Start Acting, Prompt Injection Stops Being a Small Bug

Why tool-using systems turn one malicious instruction into a cross-system security incident in 2026