The threat landscape is moving away from software exploits toward data manipulation, where attackers influence how AI agents reason, remember, and execute tasks.