The Target Is No Longer the Model. It’s the Agent.
Brief
AI agents are becoming the new attack surface, exposed to poisoned skills, prompt injection, jailbreaks and attacks through connected tools.
I read the AI security research published in a single month, February 2026, and when you put it all together, it’s not a list of curiosities. It’s a field guide to a new attack surface. In my previous piece, I explained how MITRE ATLAS catalogs threats to AI. Here, I take the next step: I map that research onto ATLAS. What emerges is a complete kill chain, and the target is no longer the model. It’s the agent.
A Month of Research, and a Shifting Target
When you look at AI security research published in a single month, one thing stands out: much of the work has stopped focusing on model behavior in isolation and has started examining real attack paths through agents, skills, protocols, and connected environments .