AI agents are exposing a security gap between the data they read and the systems they can change

Most conversations about AI security still orbit the model itself: Is the large language model (LLM) aligned, can it be jailbroken, does it hallucinate under pressure? Those are real questions. But as organizations move AI agents and LLM-powered workflows from pilot projects into production, a different category of risk is emerging, one that has almost nothing to do with the model’s weights and everything to do with the system built around it.