Researchers from Google, UC San Diego and Wisconsin tested eleven attacks against production AI agents. Each broke secure information flow and most broke least privilege. Gartner projects AI security spend will nearly double to $51 billion this year. The research argues much of that money targets the wrong layer. The controls that stop these attacks are identity governance, privileged access management, API mediation and audit logging. Security teams already run these controls.