AI Penetration Testing Expands to Retrieval Poisoning, Memory Attacks, and Sensor Manipulation