MCP 2 Prompt Injection and LLM Application Security Sep 20, 2026 MCP Servers as an Attack Surface: Tools and Tokens Sep 8, 2026