This paper presents a comprehensive analysis of “Prompt Injection 2.0,” an evolution of the prompt injection attack first discovered by Preamble, Inc. in May 2022 and reported to OpenAI. In particular, we analyze that the emergence of agent-like AI systems that autonomously perform multi-step tasks has led to the evolution of prompt injection attacks into a hybrid threat that systematically bypasses existing security controls by combining them with existing cybersecurity vulnerabilities (e.g., XSS, CSRF). Along with an evaluation of modern threats including AI worms, multi-agent infections, and hybrid cyber-AI attacks, we include recent benchmark results showing that existing web application firewalls, XSS filters, CSRF tokens, etc. fail against AI-enhanced attacks. We also present an architectural solution that combines prompt isolation, runtime security, privilege separation, and novel threat detection capabilities.