agent security 2 The Backdoor You Approved: MCP Servers as a Payments Attack Surface Sep 15, 2026 Follow the Leak: Four Channels a Prompt-Injected Agent Uses to Exfiltrate Data Sep 8, 2026