When AI becomes an attack surface: prompt injection, end-to-end attack chains, at-risk architectures, and defensive actions.