Google engineer discusses protecting AI agents from prompt injection attacks

Only one outlet has covered this so far. Argon doesn't synthesise single-source stories — rewriting or triangulating a lone piece isn't fair to the journalist who did the work. The honest thing is to send you straight to it.