Why prompt injection is table stakes — agentic red teaming is the real gap

The problem with prompt injection testing In 2023, prompt injection was the big concern. "Ignore previous instructions" was the attack. Modern models refuse those prompts well. In 2026, the attack surface changed. The model has tools.