OWASP’s Q3 2026 exploit roundup singles out three prompt injection patterns that keep working in the field: instructions ...