Agentjacking: your AI agent is now a privileged attack surface

TL;DR: If an AI agent can read external data and also take actions, an attacker can hide instructions inside the data it reads. The agent cannot reliably tell a real instruction from a poisoned one, so it runs the attacker's intent with the agent's own privileges. Perimeter tools never see it becaus