Security researchers found a way to turn a single clicked link into something far more dangerous than a typical phishing attack: a fully autonomous AI agent, quietly operating inside a company with a real employee’s identity and access, taking orders from an outside attacker ever...