AI agents can be manipulated — not through traditional hacking, but through prompt injection and related techniques that exploit how language models process instructions and content. This article breaks down the real vulnerabilities enterprises face, illustrative risk scenarios, and the defense-in-depth practices that meaningfully reduce exposure without eliminating it.