AI agents bypass basic security measures