Anthropic patched critical prompt-injection-related vulnerabilities in its Git MCP server, and follow-up reporting added detail on the Google Gemini calendar data flaw. Strategic commentary from Davos emphasizes AI security infrastructure gaps as prompt injection and semantic threat vectors remain primary risks in 2026.