New attack provides one more reason why AI browsers are a bad idea