Generative and agentic AI create a new attack surface — prompt injection, model data leakage, shadow AI. What a credible AI security program looks like in 2026.