RAG, Agentic AI, and the New Attack Surface