AI Security in 2026: Prompt Injection, Tool Poisoning, and the New Agentic Risk Stack
AI security is no longer only about bad prompts. It now includes tool misuse, MCP poisoning, unbounded consumption, and response-side leakage. This post compares those risks with Odock's actual runtime controls.
Youcef Kaddour
Founder at Odock and AI infrastructure engineer
What you should take away
- 1
The latest AI security guidance is shifting from prompt-only thinking to agent, tool, and runtime control.
- 2
Our Security Engine maps well to prompt injection, redaction, leakage, tool governance, and unbounded-consumption controls that belong in the gateway.
- 3
Some risks, such as model supply-chain attestation and training-data poisoning, still need controls outside the gateway.