Vulnerabilities in AI web search generating biased endorsements