data exfiltration 1 Follow the Leak: Four Channels a Prompt-Injected Agent Uses to Exfiltrate Data Sep 8, 2026